General

  • Target

    de9ff33f6e96fb361c89eb453cc18b8a645ca9f16393216f4261c994d4cd10de

  • Size

    241KB

  • Sample

    240816-he3rdszhpa

  • MD5

    08c5066e6ba5b3b1a29c0c7e754fb5f1

  • SHA1

    2091a8e957956b94ab68d89e77ce0ed6d2e14814

  • SHA256

    de9ff33f6e96fb361c89eb453cc18b8a645ca9f16393216f4261c994d4cd10de

  • SHA512

    ead9141d44ecc0e4dca6e35220a03f94744d5fd36883a00e9c2a12dea9b8a52224b69650d36145f324bf16e8e4c532e86266c600ac98ab40b6584b529baa864e

  • SSDEEP

    6144:3XJiP/aK2h9H/B+rwNBV+UdvrEFp7hKTT:3XgP/aK2vB+kNBjvrEH74

Malware Config

Targets

    • Target

      de9ff33f6e96fb361c89eb453cc18b8a645ca9f16393216f4261c994d4cd10de

    • Size

      241KB

    • MD5

      08c5066e6ba5b3b1a29c0c7e754fb5f1

    • SHA1

      2091a8e957956b94ab68d89e77ce0ed6d2e14814

    • SHA256

      de9ff33f6e96fb361c89eb453cc18b8a645ca9f16393216f4261c994d4cd10de

    • SHA512

      ead9141d44ecc0e4dca6e35220a03f94744d5fd36883a00e9c2a12dea9b8a52224b69650d36145f324bf16e8e4c532e86266c600ac98ab40b6584b529baa864e

    • SSDEEP

      6144:3XJiP/aK2h9H/B+rwNBV+UdvrEFp7hKTT:3XgP/aK2vB+kNBjvrEH74

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks