General

  • Target

    b0e32365b0a7ba09b1e4f56870a44d1fc4b3cbc0142e6b9016f700596bba1a7c

  • Size

    296KB

  • Sample

    240815-m1enxateqk

  • MD5

    a090ddb15185f020d29401aefa40dbd3

  • SHA1

    aef84e78773d95d356e1ea9a84c6b33679651a34

  • SHA256

    b0e32365b0a7ba09b1e4f56870a44d1fc4b3cbc0142e6b9016f700596bba1a7c

  • SHA512

    ef878a9ec9be6162da4c7e5a9e09df00a5cacb00b4656d72388305ca53de63fd901d8e894bc26997670ad6163b5f96c19b0ef7371ecfda10e33f2051edfef3bd

  • SSDEEP

    6144:h+bfb9iRSO1bzgQdR5cMCVFZSQGYF91xeuyJPAOvvsCxBV+UdvrEFp7hK5:houSO1bzgQdkTPGYFwuyJPhsCxBjvrE+

Malware Config

Targets

    • Target

      b0e32365b0a7ba09b1e4f56870a44d1fc4b3cbc0142e6b9016f700596bba1a7c

    • Size

      296KB

    • MD5

      a090ddb15185f020d29401aefa40dbd3

    • SHA1

      aef84e78773d95d356e1ea9a84c6b33679651a34

    • SHA256

      b0e32365b0a7ba09b1e4f56870a44d1fc4b3cbc0142e6b9016f700596bba1a7c

    • SHA512

      ef878a9ec9be6162da4c7e5a9e09df00a5cacb00b4656d72388305ca53de63fd901d8e894bc26997670ad6163b5f96c19b0ef7371ecfda10e33f2051edfef3bd

    • SSDEEP

      6144:h+bfb9iRSO1bzgQdR5cMCVFZSQGYF91xeuyJPAOvvsCxBV+UdvrEFp7hK5:houSO1bzgQdkTPGYFwuyJPhsCxBjvrE+

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks