Overview

overview

10

Static

static

10

508c02a40e...2d.dll

windows7-x64

7

508c02a40e...2d.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    9440237dd154d325687ec5b71c335e0f.zip

  • Size

    68KB

  • MD5

    e8aff927ee7b2c0fa9452a7e3e7e6375

  • SHA1

    1ad29ee3776ab00eebee270d58981ccf01d2f506

  • SHA256

    e87e148b8c5828a450aae0360e2f6dca49db6ead984da45ba3dbbd65fadcc248

  • SHA512

    a4f991155d3f68477d7eec682734fabcc23e5db68c10860b2f9b75b41d51d23a2ecff2a8dbea82c2d70063c44dca9e13cb3e9a4be1a63630df79f6ff35cea091

  • SSDEEP

    1536:3CM3o0ZN8jNmzBFrsScoSRCcIjqb61B69zAD8qlSkCSkoL:3j3nN8gzISbaCcIji2cE8qIk0oL

Score
10/10
backdoorupxfloxif

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
    backdoor
  • Floxif family
    floxif
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9440237dd154d325687ec5b71c335e0f.zip
    .zip

    Password: infected

  • 508c02a40ea9b6726da009b948c9a64b40da6128de83b455a36f2ad33fc40c2d
    .dll windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections