Overview

overview

10

Static

static

1

c91213067b...09.exe

windows7-x64

10

c91213067b...09.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c91213067b475912cd5378b79ea5cdd03099dba0c227cfa81bdf0e9edcea6a09

  • Size

    441KB

  • Sample

    240707-d1gc3avdrb

  • MD5

    e00de5eafb10fdffd111b5bbe4b82721

  • SHA1

    96a5029a135f721f1ee2c52fa7a0261a164268f5

  • SHA256

    c91213067b475912cd5378b79ea5cdd03099dba0c227cfa81bdf0e9edcea6a09

  • SHA512

    2e5ac2bb2bb4ab0fb78b8d597bd462f887e568e04ed10c1c4fb808ee75334c6543017c136ba2f3009b3e0ebac3a6a66dc2c2400cb50003b79b646411f52ab612

  • SSDEEP

    12288:boonMw7CEW2nhpDxxJrrMMDMMM6Xg18bMZBjvrEH7Vh:L3hpDxrrMMDMMM65bMHrEH7Vh

Score
10/10
floxifbackdoortrojanupx

Malware Config

Targets

    • Target

      c91213067b475912cd5378b79ea5cdd03099dba0c227cfa81bdf0e9edcea6a09

    • Size

      441KB

    • MD5

      e00de5eafb10fdffd111b5bbe4b82721

    • SHA1

      96a5029a135f721f1ee2c52fa7a0261a164268f5

    • SHA256

      c91213067b475912cd5378b79ea5cdd03099dba0c227cfa81bdf0e9edcea6a09

    • SHA512

      2e5ac2bb2bb4ab0fb78b8d597bd462f887e568e04ed10c1c4fb808ee75334c6543017c136ba2f3009b3e0ebac3a6a66dc2c2400cb50003b79b646411f52ab612

    • SSDEEP

      12288:boonMw7CEW2nhpDxxJrrMMDMMM6Xg18bMZBjvrEH7Vh:L3hpDxrrMMDMMM65bMHrEH7Vh

    Score
    10/10
    floxifbackdoortrojanupx

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks