General

  • Target

    bbc16bb328c398727dd16a42732f01baaa86891d6a7056dbda7efeec35ab4c1e

  • Size

    2.5MB

  • Sample

    240808-s9naasyhqh

  • MD5

    9e642036c2fe81e8ec85c38b7f274cc7

  • SHA1

    077f45f30d29e638b75a54d03444ae4cae3cb2ed

  • SHA256

    bbc16bb328c398727dd16a42732f01baaa86891d6a7056dbda7efeec35ab4c1e

  • SHA512

    ed03f5ecd7b3d8112ccf9b70e06e6b27f36b319d042da935a77790ea532bc8d6035031d15f5775c54b206a02e1ea8ad5454a069285e7b3efb043529027628303

  • SSDEEP

    49152:EuIIKFofs2hPd2l177BTK2VbDsar1YDjc:EjEfs2hPIl1/X

Malware Config

Targets

    • Target

      bbc16bb328c398727dd16a42732f01baaa86891d6a7056dbda7efeec35ab4c1e

    • Size

      2.5MB

    • MD5

      9e642036c2fe81e8ec85c38b7f274cc7

    • SHA1

      077f45f30d29e638b75a54d03444ae4cae3cb2ed

    • SHA256

      bbc16bb328c398727dd16a42732f01baaa86891d6a7056dbda7efeec35ab4c1e

    • SHA512

      ed03f5ecd7b3d8112ccf9b70e06e6b27f36b319d042da935a77790ea532bc8d6035031d15f5775c54b206a02e1ea8ad5454a069285e7b3efb043529027628303

    • SSDEEP

      49152:EuIIKFofs2hPd2l177BTK2VbDsar1YDjc:EjEfs2hPIl1/X

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks