General

  • Target

    6082488425cfcdfccd2d42109e4416d059ac16d016cc31d608bc130d6074bf1f

  • Size

    277KB

  • Sample

    240913-tay37awfrc

  • MD5

    23a5867cc9789091df13bcbfbaf466e4

  • SHA1

    f855a677aa444dc801a6c3eb1eb09b42f5749b14

  • SHA256

    6082488425cfcdfccd2d42109e4416d059ac16d016cc31d608bc130d6074bf1f

  • SHA512

    cb59d4333363b7278f9201ce99fa32d03f69b24886ae68a69bbdc9f962305eafc79b8f8731213e9d68cf7fceda20c20d174855f6c3ad857588a9aca8c1c9e5f6

  • SSDEEP

    3072:vHrfzYPc6X/YdW4l/DReos0gvEWdMuoB+UKrRiEOB9dXCQT1X/MK0dk5xMBQLJy3:AAPl/DRfkvPM7B+mCGBV+UdvrEFp7hK2

Malware Config

Targets

    • Target

      6082488425cfcdfccd2d42109e4416d059ac16d016cc31d608bc130d6074bf1f

    • Size

      277KB

    • MD5

      23a5867cc9789091df13bcbfbaf466e4

    • SHA1

      f855a677aa444dc801a6c3eb1eb09b42f5749b14

    • SHA256

      6082488425cfcdfccd2d42109e4416d059ac16d016cc31d608bc130d6074bf1f

    • SHA512

      cb59d4333363b7278f9201ce99fa32d03f69b24886ae68a69bbdc9f962305eafc79b8f8731213e9d68cf7fceda20c20d174855f6c3ad857588a9aca8c1c9e5f6

    • SSDEEP

      3072:vHrfzYPc6X/YdW4l/DReos0gvEWdMuoB+UKrRiEOB9dXCQT1X/MK0dk5xMBQLJy3:AAPl/DRfkvPM7B+mCGBV+UdvrEFp7hK2

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks