Phoenix
Sigma IntelligenceBeta
Emerging Threats
Malware2017

PlugX

1Rules
2References
1Folders
2023-02-03Latest
Summary

PlugX is tracked here as a malware family or toolset with 1 Sigma detection spanning 2017. Coverage centers on windows / process_creation.

Related Detections
Search this threat
Emerging Threathightest

Potential PlugX Activity

Detects the execution of an executable that is typically used by PlugX for DLL side loading starting from an uncommon location

WindowsProcess Creation
TA0004 · Privilege EscalationTA0003 · PersistenceS0013 · PlugXTA0005 · Stealth+2
Florian Roth (Nextron Systems)Mon Jun 122017
References
1
Resolving title…
hexacorn.com
2
Resolving title…
countuponsecurity.com