General

  • Target

    df5111141778cc4c5e1a8af64d4660fd13225302e18fedfd4cec2616775a3195

  • Size

    512KB

  • Sample

    240708-f1wh4awfjb

  • MD5

    d35ef4ce0784affd73f20a293380fd39

  • SHA1

    8b5431f226bea41850b1076b4c2f586223ce0df7

  • SHA256

    df5111141778cc4c5e1a8af64d4660fd13225302e18fedfd4cec2616775a3195

  • SHA512

    9adc618835e540289da7aa2f5f49436a11b265c06c1fabda9eb0f3fd34d4eb7886b3b0ab5d9e7618f3f8a709c2a3c7d8b202a92680b166e589ee1869aa4bcc22

  • SSDEEP

    12288:wN0h4iFKz/L7ROh+rL1YkCKipaq1BYbJllBjvrEH7Y:wNHiFKz/L7R36kmaaKzrEH7Y

Malware Config

Targets

    • Target

      df5111141778cc4c5e1a8af64d4660fd13225302e18fedfd4cec2616775a3195

    • Size

      512KB

    • MD5

      d35ef4ce0784affd73f20a293380fd39

    • SHA1

      8b5431f226bea41850b1076b4c2f586223ce0df7

    • SHA256

      df5111141778cc4c5e1a8af64d4660fd13225302e18fedfd4cec2616775a3195

    • SHA512

      9adc618835e540289da7aa2f5f49436a11b265c06c1fabda9eb0f3fd34d4eb7886b3b0ab5d9e7618f3f8a709c2a3c7d8b202a92680b166e589ee1869aa4bcc22

    • SSDEEP

      12288:wN0h4iFKz/L7ROh+rL1YkCKipaq1BYbJllBjvrEH7Y:wNHiFKz/L7R36kmaaKzrEH7Y

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks