General

  • Target

    4121ca7cdfa62b1cb03b99ec0d7838be522a50eb4bd6aa79165f5db47d910735

  • Size

    277KB

  • Sample

    240913-ra7dfstdqc

  • MD5

    bd1081e346f9b7f483371308dd889d5b

  • SHA1

    094b9d0c7fe1a1f896fa552dd04d7de3f98c304a

  • SHA256

    4121ca7cdfa62b1cb03b99ec0d7838be522a50eb4bd6aa79165f5db47d910735

  • SHA512

    abc9bdaacc130f09394902050491f6d5434622eba60dc45ade27a77119ad3bbedfe929cb9ceae603a71e40f9f37ca7962333de65b29fe6fa234bdddff580f8aa

  • SSDEEP

    6144:iWAel/DRfkTC3dM7B+mCGBV+UdvrEFp7hKA:iWAelbRfky6B+mCGBjvrEH7T

Malware Config

Targets

    • Target

      4121ca7cdfa62b1cb03b99ec0d7838be522a50eb4bd6aa79165f5db47d910735

    • Size

      277KB

    • MD5

      bd1081e346f9b7f483371308dd889d5b

    • SHA1

      094b9d0c7fe1a1f896fa552dd04d7de3f98c304a

    • SHA256

      4121ca7cdfa62b1cb03b99ec0d7838be522a50eb4bd6aa79165f5db47d910735

    • SHA512

      abc9bdaacc130f09394902050491f6d5434622eba60dc45ade27a77119ad3bbedfe929cb9ceae603a71e40f9f37ca7962333de65b29fe6fa234bdddff580f8aa

    • SSDEEP

      6144:iWAel/DRfkTC3dM7B+mCGBV+UdvrEFp7hKA:iWAelbRfky6B+mCGBjvrEH7T

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks