General
-
Target
2024-07-31_cb08ef26d2d9e931ec85537b1a7cd9f0_bkransomware_floxif
-
Size
182KB
-
Sample
240731-bf94jasgmd
-
MD5
cb08ef26d2d9e931ec85537b1a7cd9f0
-
SHA1
dc4719e7787e5f15aafbea852ee8de8e2d57644d
-
SHA256
3e68a96877b17a1f3ea948e30677f0c495b59f409ca6de30cabb6a30d83ef98d
-
SHA512
5ea3f036dca1e516d44f8e069d78e3f76dcac25e5ef37b2360e10c81c47c7734918632b6138304f7af22cb962dbaafb2f20f14f973cf1753e422f6d087b331cc
-
SSDEEP
3072:5TP3m3tJWWS36qqYhFRaDOKEwV+Am2lQBV+UdE+rECWp7hKdAU:5TwJWWSPdXa7EvbBV+UdvrEFp7hKdp
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-31_cb08ef26d2d9e931ec85537b1a7cd9f0_bkransomware_floxif.exe
Resource
win7-20240704-en
Malware Config
Targets
-
-
Target
2024-07-31_cb08ef26d2d9e931ec85537b1a7cd9f0_bkransomware_floxif
-
Size
182KB
-
MD5
cb08ef26d2d9e931ec85537b1a7cd9f0
-
SHA1
dc4719e7787e5f15aafbea852ee8de8e2d57644d
-
SHA256
3e68a96877b17a1f3ea948e30677f0c495b59f409ca6de30cabb6a30d83ef98d
-
SHA512
5ea3f036dca1e516d44f8e069d78e3f76dcac25e5ef37b2360e10c81c47c7734918632b6138304f7af22cb962dbaafb2f20f14f973cf1753e422f6d087b331cc
-
SSDEEP
3072:5TP3m3tJWWS36qqYhFRaDOKEwV+Am2lQBV+UdE+rECWp7hKdAU:5TwJWWSPdXa7EvbBV+UdvrEFp7hKdp
-
Detects Floxif payload
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-