floxif | 353e5dfd6d89a125deb17f8c4ef66e5d207e3674b6386b338d37e0d9ae1369f6

General

Target

353e5dfd6d89a125deb17f8c4ef66e5d207e3674b6386b338d37e0d9ae1369f6
Size

76KB
MD5

9db2841718602eb09c01e301387e6bad
SHA1

ffd4105e2b577ad841cd0db7a330bde523679184
SHA256

353e5dfd6d89a125deb17f8c4ef66e5d207e3674b6386b338d37e0d9ae1369f6
SHA512

18f7b35cf7f6a48ae0f5340311eef6c5e11fdb5766a53f29879f32f2258b5f3e7f2d8e4595d33380512d614b96645724290f8689404276f864db281600adba78
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZfiQxy:c8y93KQjy7G55riF1cMo031Xw

Score

10^/10

backdoor upx floxif

Detects Floxif payload 1 IoCs
backdoor

Processes:

resource yara_rule

sample floxif
Floxif family
floxif
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.

Processes:

resource yara_rule

sample acprotect
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	floxif

resource	yara_rule
sample	acprotect

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
353e5dfd6d89a125deb17f8c4ef66e5d207e3674b6386b338d37e0d9ae1369f6
unpack001/out.upx