Overview

overview

10

Static

static

10

0f970ab26c...64.dll

windows7-x64

7

0f970ab26c...64.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f970ab26c9a8834ad699b5e82734dd9b0bf4bfe6379de614a1626b569e5ba64.exe

  • Size

    76KB

  • MD5

    e3ab6cf286404df972f65e23b18f6ec0

  • SHA1

    335ab33a608851ad15f719abb2d23fad50529662

  • SHA256

    0f970ab26c9a8834ad699b5e82734dd9b0bf4bfe6379de614a1626b569e5ba64

  • SHA512

    499f06c5eebd6d8516d92b832da382820b4abc4657923af5c813dbc322aa8caac4adf110fc2eb8b732f3aaddbe14cd6d9ea3bc857ad2db8b0d3c0c4605b3614d

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZjXYdL3cR:c8y93KQjy7G55riF1cMo03BIdDw

Score
10/10
backdoorupxfloxif

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
    backdoor
  • Floxif family
    floxif
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f970ab26c9a8834ad699b5e82734dd9b0bf4bfe6379de614a1626b569e5ba64.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections