Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-08-09_8f9b01dc67825b5a5715ecd96f4dfdc1_bkransomware_floxif
-
Size
3.1MB
-
Sample
240809-bg49nsxeqg
-
MD5
8f9b01dc67825b5a5715ecd96f4dfdc1
-
SHA1
07cb317002590da043adb877e6f62099a79bc0de
-
SHA256
5d072593f0f366e69c9408d5bdf88c8efcedda36ea3e98d4853cf32dfbc43ae7
-
SHA512
00af256026146c574fb90abf9c5623ce57b7c6a710d372b136fcbb99bbddc3ab1b5c8ff21fecf4357d52693fe8e2dfb6c9ca840b36375a3ac314a86567e4cdd1
-
SSDEEP
49152:Mkjxcpob5JLtnrhON2bun5Bzga/mYm/OtmEsxheZYZsgs:ZxcG5JLtnoNfnb//mMEEsxheZus
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-09_8f9b01dc67825b5a5715ecd96f4dfdc1_bkransomware_floxif.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-09_8f9b01dc67825b5a5715ecd96f4dfdc1_bkransomware_floxif.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-08-09_8f9b01dc67825b5a5715ecd96f4dfdc1_bkransomware_floxif
-
Size
3.1MB
-
MD5
8f9b01dc67825b5a5715ecd96f4dfdc1
-
SHA1
07cb317002590da043adb877e6f62099a79bc0de
-
SHA256
5d072593f0f366e69c9408d5bdf88c8efcedda36ea3e98d4853cf32dfbc43ae7
-
SHA512
00af256026146c574fb90abf9c5623ce57b7c6a710d372b136fcbb99bbddc3ab1b5c8ff21fecf4357d52693fe8e2dfb6c9ca840b36375a3ac314a86567e4cdd1
-
SSDEEP
49152:Mkjxcpob5JLtnrhON2bun5Bzga/mYm/OtmEsxheZYZsgs:ZxcG5JLtnoNfnb//mMEEsxheZus
-
Detects Floxif payload
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-