General

  • Target

    f77a2644103661575650ea77fc227c4177d3a1b5b810279f1b26c2a3acfd5745

  • Size

    384KB

  • Sample

    240908-lx25cs1hpe

  • MD5

    3db4d087f97db83e39ed7af0674e0ab1

  • SHA1

    3324ac97052b5ffb39c4f202156d89337aead986

  • SHA256

    f77a2644103661575650ea77fc227c4177d3a1b5b810279f1b26c2a3acfd5745

  • SHA512

    1897270d7d0e5a73ce305cc0c3e180b7ff10235e9b9fe5c654c6b5a7349290c61ba0d2150dd6547a6d9b6ef87ce71cfde701d7694064a873fa9a13677acad33a

  • SSDEEP

    6144:oj0fYJ83Tc+idIOeyCcufgtRDzKUEiFAKtDYFlBV+UdvrEFp7hK38:ojsY6o+idIO6ccmKUZSlLBjvrEH7e8

Malware Config

Targets

    • Target

      f77a2644103661575650ea77fc227c4177d3a1b5b810279f1b26c2a3acfd5745

    • Size

      384KB

    • MD5

      3db4d087f97db83e39ed7af0674e0ab1

    • SHA1

      3324ac97052b5ffb39c4f202156d89337aead986

    • SHA256

      f77a2644103661575650ea77fc227c4177d3a1b5b810279f1b26c2a3acfd5745

    • SHA512

      1897270d7d0e5a73ce305cc0c3e180b7ff10235e9b9fe5c654c6b5a7349290c61ba0d2150dd6547a6d9b6ef87ce71cfde701d7694064a873fa9a13677acad33a

    • SSDEEP

      6144:oj0fYJ83Tc+idIOeyCcufgtRDzKUEiFAKtDYFlBV+UdvrEFp7hK38:ojsY6o+idIO6ccmKUZSlLBjvrEH7e8

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks