General
- Target 295b9467242ffd0d1e31974abb86b2e0N.exe
- Size 580KB
- Sample240821-d659dayard
- SHA256 c6921322345430afa00d52c102743511c57e26c65466fb813e38f4c4fc1ba7c2
Score
10/10
Malware Config
Targets
-
- Target 295b9467242ffd0d1e31974abb86b2e0N.exe
- Size 580KB
- SHA256 c6921322345430afa00d52c102743511c57e26c65466fb813e38f4c4fc1ba7c2
Score10/10-
Floxif, Floodfix
Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
-
Detects Floxif payload
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Regshot.exe
- Size 550KB
- SHA256 3d120c7348dc4055d8c587712cae723acf6a1dc25c85b272aca1b864ed773153
Score3/10 -
- Target Regshot64.exe
- Size 715KB
- SHA256 730b26bac77f2524364b85ad1c42a585a04bdc80b3e83832b9dcdf9455365783
Score1/10 -
- Target regshot.url
- Size 166B
- SHA256 31364d1bdce36f942f2d9d0d0f2b6c2530919829cf21cc27eee31a2081badbba
Score6/10-
Checks whether UAC is enabled
-
- Target uninst.exe
- Size 33KB
- SHA256 2c25de8830a6bb037a47028ea7e1e458d6741291e185b021631c53864deec4a2
Score3/10