General

  • Target

    0ebbbd4f0719cef47d5680f3e81dbe00N

  • Size

    5.3MB

  • Sample

    240910-jvfggatbmp

  • MD5

    0ebbbd4f0719cef47d5680f3e81dbe00

  • SHA1

    a0655e3d2ff46957fca499e8784177e3c53ca136

  • SHA256

    3f6926bb9f65368292ea5d7959821139a259006ce1988907c50e8a565f6aa6b4

  • SHA512

    57153ae0f1275959b6cdec4afa57d6d51d39f5aa6d9d0978425d79819bea22bcd7294d38d9eb5ebf1d7ec183ffe14ac9c93991f90c7a1ccd92328dadacb1074b

  • SSDEEP

    98304:EkGlX+EMq7OSWmo3P8+Vo1bJ+kV7ej3bBe4pK6JaG/+aM9xpa19z/g5lHTj:E9EE7/TFaj3bB06JaLpa19z459j

Malware Config

Targets

    • Target

      0ebbbd4f0719cef47d5680f3e81dbe00N

    • Size

      5.3MB

    • MD5

      0ebbbd4f0719cef47d5680f3e81dbe00

    • SHA1

      a0655e3d2ff46957fca499e8784177e3c53ca136

    • SHA256

      3f6926bb9f65368292ea5d7959821139a259006ce1988907c50e8a565f6aa6b4

    • SHA512

      57153ae0f1275959b6cdec4afa57d6d51d39f5aa6d9d0978425d79819bea22bcd7294d38d9eb5ebf1d7ec183ffe14ac9c93991f90c7a1ccd92328dadacb1074b

    • SSDEEP

      98304:EkGlX+EMq7OSWmo3P8+Vo1bJ+kV7ej3bBe4pK6JaG/+aM9xpa19z/g5lHTj:E9EE7/TFaj3bB06JaLpa19z459j

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks