General

  • Target

    ee69289754bfbde9b8a5743afd0c4d00N.exe

  • Size

    145KB

  • Sample

    240909-dcmj6sxhpp

  • MD5

    ee69289754bfbde9b8a5743afd0c4d00

  • SHA1

    e34d661db50470387bc50b1761f4e9d9f04e0010

  • SHA256

    3442c825190e4c68309646c3e56822928d4018718f3813f32e7b5d0679277a13

  • SHA512

    51d160a91c7967f22e0c3e57cd8ac2b490673bfe8f84a280750303f40ec5c32b586386566f999372521bcc49877ffbe5f2ae94c0d05c6cea07ecc3ea3a4f0ae6

  • SSDEEP

    3072:dGFu9FnDPdr4smOcxPWz2lQBV+UdE+rECWp7hKTwzNh:EFunDPdr4vhaBV+UdvrEFp7hKUzn

Malware Config

Targets

    • Target

      ee69289754bfbde9b8a5743afd0c4d00N.exe

    • Size

      145KB

    • MD5

      ee69289754bfbde9b8a5743afd0c4d00

    • SHA1

      e34d661db50470387bc50b1761f4e9d9f04e0010

    • SHA256

      3442c825190e4c68309646c3e56822928d4018718f3813f32e7b5d0679277a13

    • SHA512

      51d160a91c7967f22e0c3e57cd8ac2b490673bfe8f84a280750303f40ec5c32b586386566f999372521bcc49877ffbe5f2ae94c0d05c6cea07ecc3ea3a4f0ae6

    • SSDEEP

      3072:dGFu9FnDPdr4smOcxPWz2lQBV+UdE+rECWp7hKTwzNh:EFunDPdr4vhaBV+UdvrEFp7hKUzn

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks