General

  • Target

    8a0300f6d91bedc7ea1532025dbda31c74a58de7bc9880e9b7bd8ea3bde90e5c

  • Size

    277KB

  • Sample

    240913-xk8xxssfmj

  • MD5

    c14e5260d4b4de37d69511a964df9cf6

  • SHA1

    b44272be8ccd12f49d8a2bba344975730f90748f

  • SHA256

    8a0300f6d91bedc7ea1532025dbda31c74a58de7bc9880e9b7bd8ea3bde90e5c

  • SHA512

    b78ab60221d52c5b4728b077333882482e9ea416302a1611d49ff2716c8b6bee4a93abf04d03fb1fb5ca3ad7fc15dc71c9185bddd905eed10c8e2a6343076dd4

  • SSDEEP

    6144:AAFl/DRfBMC3dM7B+mCGBV+UdvrEFp7hKkr:AAFlbRfBR6B+mCGBjvrEH7Vr

Malware Config

Targets

    • Target

      8a0300f6d91bedc7ea1532025dbda31c74a58de7bc9880e9b7bd8ea3bde90e5c

    • Size

      277KB

    • MD5

      c14e5260d4b4de37d69511a964df9cf6

    • SHA1

      b44272be8ccd12f49d8a2bba344975730f90748f

    • SHA256

      8a0300f6d91bedc7ea1532025dbda31c74a58de7bc9880e9b7bd8ea3bde90e5c

    • SHA512

      b78ab60221d52c5b4728b077333882482e9ea416302a1611d49ff2716c8b6bee4a93abf04d03fb1fb5ca3ad7fc15dc71c9185bddd905eed10c8e2a6343076dd4

    • SSDEEP

      6144:AAFl/DRfBMC3dM7B+mCGBV+UdvrEFp7hKkr:AAFlbRfBR6B+mCGBjvrEH7Vr

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks