Overview

overview

10

Static

static

1

f2cf3d2b0e...2c.exe

windows7-x64

10

f2cf3d2b0e...2c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2cf3d2b0e4c8622e81e81be9df124c33ace3aff287836ac0c3122cff0725e2c

  • Size

    5.0MB

  • Sample

    240703-fb4s6sxhja

  • MD5

    c106cc4d0f4566fc19919aea7860a0da

  • SHA1

    7a4237e490aade62724015a5c9721d481c603a17

  • SHA256

    f2cf3d2b0e4c8622e81e81be9df124c33ace3aff287836ac0c3122cff0725e2c

  • SHA512

    aca2fc9c8a4bbb33ed97b8cb7a9749a9d458c6bcfbbdc915138dc45fc9a914ecf2efc320efd47208d27d8b699a6a389510115df9c5327fb3146e87dc3ff064fd

  • SSDEEP

    98304:fG5Qz0XB2r24MzK1d6Q+08I2mo6v7aDrKAdj0PeE1QJHlEy3jZ6:fG5Vxm3qWQQb8IBlv7aDHYJcEyzZ6

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      f2cf3d2b0e4c8622e81e81be9df124c33ace3aff287836ac0c3122cff0725e2c

    • Size

      5.0MB

    • MD5

      c106cc4d0f4566fc19919aea7860a0da

    • SHA1

      7a4237e490aade62724015a5c9721d481c603a17

    • SHA256

      f2cf3d2b0e4c8622e81e81be9df124c33ace3aff287836ac0c3122cff0725e2c

    • SHA512

      aca2fc9c8a4bbb33ed97b8cb7a9749a9d458c6bcfbbdc915138dc45fc9a914ecf2efc320efd47208d27d8b699a6a389510115df9c5327fb3146e87dc3ff064fd

    • SSDEEP

      98304:fG5Qz0XB2r24MzK1d6Q+08I2mo6v7aDrKAdj0PeE1QJHlEy3jZ6:fG5Vxm3qWQQb8IBlv7aDHYJcEyzZ6

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks for any installed AV software in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks