General

  • Target

    514465e23be0dcb116a3495128b83cc95cb0ff0eb5e9bfd23bd7963ca6919346

  • Size

    384KB

  • Sample

    240828-1x3s8azhlr

  • MD5

    7079e02cd3b08aebb52e821103a8fcc5

  • SHA1

    a043a794363e1e5d19dcefcfa1db14bfe9e768e5

  • SHA256

    514465e23be0dcb116a3495128b83cc95cb0ff0eb5e9bfd23bd7963ca6919346

  • SHA512

    1fe08ed98617c74ccb6d3bf5328db5394d18cbe6a36a95a71108ccfcd8c6527c8762c2b55144b0e158b2c783b403f4bc4755f90b6648598aea7111e0b20ff747

  • SSDEEP

    6144:aj0fYJ83TcIe9dIOeyCcutrgtRDzKUEiFAKtDYFXABV+UdvrEFp7hKl:ajsY6oX9dIO6cErmKUZSliBjvrEH7i

Malware Config

Targets

    • Target

      514465e23be0dcb116a3495128b83cc95cb0ff0eb5e9bfd23bd7963ca6919346

    • Size

      384KB

    • MD5

      7079e02cd3b08aebb52e821103a8fcc5

    • SHA1

      a043a794363e1e5d19dcefcfa1db14bfe9e768e5

    • SHA256

      514465e23be0dcb116a3495128b83cc95cb0ff0eb5e9bfd23bd7963ca6919346

    • SHA512

      1fe08ed98617c74ccb6d3bf5328db5394d18cbe6a36a95a71108ccfcd8c6527c8762c2b55144b0e158b2c783b403f4bc4755f90b6648598aea7111e0b20ff747

    • SSDEEP

      6144:aj0fYJ83TcIe9dIOeyCcutrgtRDzKUEiFAKtDYFXABV+UdvrEFp7hKl:ajsY6oX9dIO6cErmKUZSliBjvrEH7i

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks