General

  • Target

    c7409ca04079f021552bbbf979851194f7d1de90ebce3d55401a217aaa9cb9f6

  • Size

    286KB

  • Sample

    240910-nsz6bascll

  • MD5

    6ffdcd0870e2ca708e63b3f76f78dcac

  • SHA1

    8c3f88b9076a197d23dbae50ca021905d821acde

  • SHA256

    c7409ca04079f021552bbbf979851194f7d1de90ebce3d55401a217aaa9cb9f6

  • SHA512

    e363be2f53a384b26862f016d9308224c353217f854180eafe35b1e608964c5c2e514967091fbdb10f93ee761df97f7ef49d5eadb7f7b616f1fe9b164a956d20

  • SSDEEP

    6144:Ie+jR/5kHouyXnZhB+h8WHlBV+UdvrEFp7hKV:Ieo/JuyXnPB+h8WHlBjvrEH7S

Malware Config

Targets

    • Target

      c7409ca04079f021552bbbf979851194f7d1de90ebce3d55401a217aaa9cb9f6

    • Size

      286KB

    • MD5

      6ffdcd0870e2ca708e63b3f76f78dcac

    • SHA1

      8c3f88b9076a197d23dbae50ca021905d821acde

    • SHA256

      c7409ca04079f021552bbbf979851194f7d1de90ebce3d55401a217aaa9cb9f6

    • SHA512

      e363be2f53a384b26862f016d9308224c353217f854180eafe35b1e608964c5c2e514967091fbdb10f93ee761df97f7ef49d5eadb7f7b616f1fe9b164a956d20

    • SSDEEP

      6144:Ie+jR/5kHouyXnZhB+h8WHlBV+UdvrEFp7hKV:Ieo/JuyXnPB+h8WHlBjvrEH7S

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks