URLhaus Database

URLhaus tries to identify the malware associated with the payload served by a certain malware URL. In case URLhaus is able to identify the associated malware family, the payload will be tagged accordingly (field signature). The page below gives you an overview on payloads that URLhaus has identified as Plugx.

Database Entry


Signature:Plugx
Firstseen:2020-06-04 08:07:41 UTC
Lastseen:2025-07-02 07:21:16 UTC
Unique Payloads:11
URLs:11

Payload


The table below shows all payloads that have been identified as Plugx.

Firstseen (UTC)SHA256File TypeFile sizeVT
2025-07-02 07:21:16394ddff5aaa1c525cbe57305aad363b88b62ee6f7b1118e14a679b5a0813cbe7Executable exe21'325'976Virustotal results 2 / 72 (2.78)
2025-07-01 22:46:22371cdc1fc708463018c48d5d88fb1989a3cefd9b1e50cc79bb7f1bd567769c9eExecutable exe64'732'312Virustotal results 14 / 69 (20.29)
2025-06-28 15:31:36cb524b1b4528b3935fee028f30d420ae3cb023c8c2dac7e1cce8c489e9e30f99Executable exe64'732'312Virustotal results 8 / 70 (11.43)
2025-06-25 12:48:14ac2274197f0068e836a9a89eaf3790672bbfce71d83e359e299033c4c768a934Executable exe64'732'312Virustotal results 0 / 68 (0.00)
2025-06-25 07:45:18ac2274197f0068e836a9a89eaf3790672bbfce71d83e359e299033c4c768a934Executable exe64'732'312n/a
2025-05-03 07:47:1792d1ec28099bbebaaf27dc5c8c12dc2bee8d0a73855359960b4ea536cb93f5c3Executable exe24'046'736Virustotal results 24 / 72 (33.33)
2025-04-19 20:18:16cb7090a4200946382929c068ad45310800e5da3e7ee9332ac28cc51eb6e6f7faExecutable exe24'046'736Virustotal results 1 / 72 (1.39)
2025-04-19 19:30:15cb7090a4200946382929c068ad45310800e5da3e7ee9332ac28cc51eb6e6f7faExecutable exe24'046'736Virustotal results 1 / 72 (1.39)
2020-06-27 11:16:22b922cf6284d3e4816cdf50abcc151b5063a75b88aa0e3a0cd01bf737ec3ba06fExecutable exe519'184n/a
2020-06-19 14:18:54d39288ca4f201e18ebaa0e9c8ca1e53c768bd14b24fe7fff55f81f11ed1a87a3Executable exe495'412n/a
2020-06-04 08:07:41be48d3636f5b33240f314689dc7c887811ad35897e95ed1259905b3a289e3b68Executable exe662'528n/a

Number of entries displayed: 11 (max: 1'000)