General

  • Target

    1d011edbc8c64a4438e9c7aa298d38c0N.exe

  • Size

    1.3MB

  • Sample

    240822-bqcwsa1djd

  • MD5

    1d011edbc8c64a4438e9c7aa298d38c0

  • SHA1

    713b9cfe1c52064c1e212be48f6b8a10ce18643b

  • SHA256

    ab3f91057a8e87623b6338a5bac14295f5289de859ca9e4d1982464f4efd5d60

  • SHA512

    9597a9805d82d03f81798614dacc0ef4e541b93adff84f46347d9193988a4270e0cb3f0a1c93e8ff98362303dc3f554539cd4122eda0f13056c787f19d50d0e0

  • SSDEEP

    24576:4orhrGbk0PpCcnCKZrhzuFWTAEn/RgaT2NX8nYRZR21omrEH7Bb:fcbwKrwWTADaOKYRZQwb

Malware Config

Targets

    • Target

      1d011edbc8c64a4438e9c7aa298d38c0N.exe

    • Size

      1.3MB

    • MD5

      1d011edbc8c64a4438e9c7aa298d38c0

    • SHA1

      713b9cfe1c52064c1e212be48f6b8a10ce18643b

    • SHA256

      ab3f91057a8e87623b6338a5bac14295f5289de859ca9e4d1982464f4efd5d60

    • SHA512

      9597a9805d82d03f81798614dacc0ef4e541b93adff84f46347d9193988a4270e0cb3f0a1c93e8ff98362303dc3f554539cd4122eda0f13056c787f19d50d0e0

    • SSDEEP

      24576:4orhrGbk0PpCcnCKZrhzuFWTAEn/RgaT2NX8nYRZR21omrEH7Bb:fcbwKrwWTADaOKYRZQwb

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks