Overview

overview

10

Static

static

1

29d7652ffc...0N.exe

windows7-x64

10

29d7652ffc...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29d7652ffc9a326373fcfe2c08b29200N.exe

  • Size

    477KB

  • Sample

    240806-aar54asgmj

  • MD5

    29d7652ffc9a326373fcfe2c08b29200

  • SHA1

    efad69eda0bebc27a5b5f829cce616e9bb8cd2b5

  • SHA256

    40f092c4186289ce59276f00d3d46e1e6df2eddfaf964a5634558690a9686fd8

  • SHA512

    1f9de1e88da1e0cc97255da9ad235b9f0a0f2eca33b1a68bfdab7e85c70ac477a16d2ca32b6d3264356daa56092e9265c610cd627b150d060b438754d1a35a6e

  • SSDEEP

    6144:waT2OT4Xge3byHpoHLH8FLaVpFmOp/kZi7IAb+sFpNKvXuHBkQN9ZaPdQ9nBV+Ur:mzWKrUnN5Pd4BjvrEH7Y

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

Malware Config

Targets

    • Target

      29d7652ffc9a326373fcfe2c08b29200N.exe

    • Size

      477KB

    • MD5

      29d7652ffc9a326373fcfe2c08b29200

    • SHA1

      efad69eda0bebc27a5b5f829cce616e9bb8cd2b5

    • SHA256

      40f092c4186289ce59276f00d3d46e1e6df2eddfaf964a5634558690a9686fd8

    • SHA512

      1f9de1e88da1e0cc97255da9ad235b9f0a0f2eca33b1a68bfdab7e85c70ac477a16d2ca32b6d3264356daa56092e9265c610cd627b150d060b438754d1a35a6e

    • SSDEEP

      6144:waT2OT4Xge3byHpoHLH8FLaVpFmOp/kZi7IAb+sFpNKvXuHBkQN9ZaPdQ9nBV+Ur:mzWKrUnN5Pd4BjvrEH7Y

    Score
    10/10
    floxifbackdoordiscoverytrojanupxpersistenceprivilege_escalation

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks