General

  • Target

    4adefd27e69a0fb9b96f8bdb5bc3df4591f096092abd0fb213aee6cf95883536

  • Size

    286KB

  • Sample

    240730-gn455svbrj

  • MD5

    377d103cc071f110682c9e77f51c4b85

  • SHA1

    61826e7201edcde7cb115958d62815473d5cf321

  • SHA256

    4adefd27e69a0fb9b96f8bdb5bc3df4591f096092abd0fb213aee6cf95883536

  • SHA512

    98184343cad01016741538e648e133bbe46c47ca6f22787c8d01a0b6e6219ddd310ffb193da8327f584748d1227f3727ebf88c39df14784bb81d27ad22d94dde

  • SSDEEP

    6144:3HgKNkhSR/5kHouyXnZhB+h8WHlBV+UdvrEFp7hKjWTUX:3HgKNkhm/JuyXnPB+h8WHlBjvrEH7/UX

Malware Config

Targets

    • Target

      4adefd27e69a0fb9b96f8bdb5bc3df4591f096092abd0fb213aee6cf95883536

    • Size

      286KB

    • MD5

      377d103cc071f110682c9e77f51c4b85

    • SHA1

      61826e7201edcde7cb115958d62815473d5cf321

    • SHA256

      4adefd27e69a0fb9b96f8bdb5bc3df4591f096092abd0fb213aee6cf95883536

    • SHA512

      98184343cad01016741538e648e133bbe46c47ca6f22787c8d01a0b6e6219ddd310ffb193da8327f584748d1227f3727ebf88c39df14784bb81d27ad22d94dde

    • SSDEEP

      6144:3HgKNkhSR/5kHouyXnZhB+h8WHlBV+UdvrEFp7hKjWTUX:3HgKNkhm/JuyXnPB+h8WHlBjvrEH7/UX

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks