Overview

overview

10

Static

static

1

4cf8b1dee5...80.dll

windows7-x64

10

4cf8b1dee5...80.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4cf8b1dee58bf6214dc63764acc20b3b4d62e97e2ccc778fed70d792e9227480

  • Size

    835KB

  • Sample

    240703-1fckpsxepp

  • MD5

    5246a3a54eecb7403c6d6661c4821185

  • SHA1

    8a5db33834400b92e74f4e301d7c7a4f64e2c407

  • SHA256

    4cf8b1dee58bf6214dc63764acc20b3b4d62e97e2ccc778fed70d792e9227480

  • SHA512

    21876d57ae045147ab0d9cb8536faaa41cd43c502d43caed9c8768956d5736e413ec9a4284db77ec511d1ade43eb1f81a7166acdfc872952052de7af65f8eaf6

  • SSDEEP

    12288:/mCy3Gnj/QGrB4F+FVW1rWNivf9JNxpEdnwIy2i3HlrnFDBjvrEH7ZL:/mCy3aQA4F8U1rWNivf9hpEazZrEH7J

Score
10/10
floxifbackdoortrojanupx

Malware Config

Targets

    • Target

      4cf8b1dee58bf6214dc63764acc20b3b4d62e97e2ccc778fed70d792e9227480

    • Size

      835KB

    • MD5

      5246a3a54eecb7403c6d6661c4821185

    • SHA1

      8a5db33834400b92e74f4e301d7c7a4f64e2c407

    • SHA256

      4cf8b1dee58bf6214dc63764acc20b3b4d62e97e2ccc778fed70d792e9227480

    • SHA512

      21876d57ae045147ab0d9cb8536faaa41cd43c502d43caed9c8768956d5736e413ec9a4284db77ec511d1ade43eb1f81a7166acdfc872952052de7af65f8eaf6

    • SSDEEP

      12288:/mCy3Gnj/QGrB4F+FVW1rWNivf9JNxpEdnwIy2i3HlrnFDBjvrEH7ZL:/mCy3aQA4F8U1rWNivf9hpEazZrEH7J

    Score
    10/10
    floxifbackdoortrojanupx

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks