General

  • Target

    03efdaf10905f8fad96cf07b32f93990N.exe

  • Size

    121KB

  • Sample

    240708-zcg6cazdjc

  • MD5

    03efdaf10905f8fad96cf07b32f93990

  • SHA1

    fd38d231251a7694d3a4f1ff424bb9b2122c9099

  • SHA256

    3bfe840a370ab42eaa0aa083d2ad7eeedd36fad83f1129b127f68d3c9e4c9a12

  • SHA512

    c739e226b8791269d60f38e61db670f6ce7abb18a4cfc7ab2024160565211c938441bbf0a9dfeb8961db9aa398b6ec25b6aacab16882b8d39c58525c05850072

  • SSDEEP

    3072:zUT0lrQwyHOS1Z5RUq2lQBV+UdE+rECWp7hKhtH:/ls3OS1ZrpBV+UdvrEFp7hKhtH

Malware Config

Targets

    • Target

      03efdaf10905f8fad96cf07b32f93990N.exe

    • Size

      121KB

    • MD5

      03efdaf10905f8fad96cf07b32f93990

    • SHA1

      fd38d231251a7694d3a4f1ff424bb9b2122c9099

    • SHA256

      3bfe840a370ab42eaa0aa083d2ad7eeedd36fad83f1129b127f68d3c9e4c9a12

    • SHA512

      c739e226b8791269d60f38e61db670f6ce7abb18a4cfc7ab2024160565211c938441bbf0a9dfeb8961db9aa398b6ec25b6aacab16882b8d39c58525c05850072

    • SSDEEP

      3072:zUT0lrQwyHOS1Z5RUq2lQBV+UdE+rECWp7hKhtH:/ls3OS1ZrpBV+UdvrEFp7hKhtH

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks