General

  • Target

    e6b4ce10e6b9f25bb0136c072dce5930N.exe

  • Size

    955KB

  • Sample

    240824-b9ejqa1fjl

  • MD5

    e6b4ce10e6b9f25bb0136c072dce5930

  • SHA1

    f2773cec11eb5a8391bb7f1dddcf6d0398f3ddc4

  • SHA256

    a4bbd3e33283a01357563a5a6c4118ddfd903d651cd24619a4548f73953205e2

  • SHA512

    9998821a0fd5c789d051ba6482b8549dcda50778a6c9e3025938a82421dcaf191aba64399c1d79d942df694e38125984808235add1cf0fe3f8a7500de30973bd

  • SSDEEP

    24576:wr37G4Tr6sL4rCvwHIo2WxyMz7yYK6ZSmd9saBvAnVFpMrEH7H:wyxrCvPQzvbsiUFT

Malware Config

Targets

    • Target

      e6b4ce10e6b9f25bb0136c072dce5930N.exe

    • Size

      955KB

    • MD5

      e6b4ce10e6b9f25bb0136c072dce5930

    • SHA1

      f2773cec11eb5a8391bb7f1dddcf6d0398f3ddc4

    • SHA256

      a4bbd3e33283a01357563a5a6c4118ddfd903d651cd24619a4548f73953205e2

    • SHA512

      9998821a0fd5c789d051ba6482b8549dcda50778a6c9e3025938a82421dcaf191aba64399c1d79d942df694e38125984808235add1cf0fe3f8a7500de30973bd

    • SSDEEP

      24576:wr37G4Tr6sL4rCvwHIo2WxyMz7yYK6ZSmd9saBvAnVFpMrEH7H:wyxrCvPQzvbsiUFT

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks