General

  • Target

    280ddea41bc6a9afa8186de7483601d0N

  • Size

    2.6MB

  • Sample

    240911-kqyypa1glq

  • MD5

    280ddea41bc6a9afa8186de7483601d0

  • SHA1

    34815a331ab41a8e41ae1ab989ad28b869a8e196

  • SHA256

    dd5e160be2d76c53167ee829fbf54640a578da8a2ad37c51531995fc15b1bdc4

  • SHA512

    9f153988acc68b011b867e993d3ff0d02480b0de5e1a682faa1464368b5347fde03ca16cf508e62334a10d0ba0613d2a4b1e75e2059a387cfbf7b42dc6b5c27d

  • SSDEEP

    49152:qd0krhjbVYU9U/ElyrLulvGBO58GBjG9nYM6JBs4PjnhMsQHNClhIdYTf2O+yX3a:PkrRymlvGB65YNCmghMtHIledkp+Rl

Malware Config

Targets

    • Target

      280ddea41bc6a9afa8186de7483601d0N

    • Size

      2.6MB

    • MD5

      280ddea41bc6a9afa8186de7483601d0

    • SHA1

      34815a331ab41a8e41ae1ab989ad28b869a8e196

    • SHA256

      dd5e160be2d76c53167ee829fbf54640a578da8a2ad37c51531995fc15b1bdc4

    • SHA512

      9f153988acc68b011b867e993d3ff0d02480b0de5e1a682faa1464368b5347fde03ca16cf508e62334a10d0ba0613d2a4b1e75e2059a387cfbf7b42dc6b5c27d

    • SSDEEP

      49152:qd0krhjbVYU9U/ElyrLulvGBO58GBjG9nYM6JBs4PjnhMsQHNClhIdYTf2O+yX3a:PkrRymlvGB65YNCmghMtHIledkp+Rl

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks