ATT&CKReferencesUnit42 PlugX June 2017

Unit42 PlugX June 2017

Lancaster, T., Idrizovic, E. (2017, June 27). Paranoid PlugX. Retrieved April 19, 2019.

Open the source

Techniques0

Not cited by any technique.

Groups0

None recorded.

Software0

None recorded.

Campaigns0

None recorded.

Procedure examples1

TechniqueUsed byProcedure example
T1497.001
System Checks
MalwarePlugX

PlugX checks if VMware tools is running in the background by searching for any process named "vmtoolsd".

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.