General

  • Target

    590f835c6b496d8c55dd013ce20f045dd9ff07f2a0846905196f9c6a0e456bb2

  • Size

    277KB

  • Sample

    240913-xncc5atdjb

  • MD5

    5ebc7795871def410dbb5e5b29b0a09b

  • SHA1

    cd3101a6e0cac98b89921a8500eb830882fc9561

  • SHA256

    590f835c6b496d8c55dd013ce20f045dd9ff07f2a0846905196f9c6a0e456bb2

  • SHA512

    a6541cfdb7b24826fa76247d42a657697eaae6e5e7c011d1018328ee22aec207e09f5c1de57de91ea0a7b337b860e0f26073ef23ac8d8f729b51372973ee11cb

  • SSDEEP

    6144:AA4l/DknTC3dM7B+mCGBV+UdvrEFp7hKvG9:AA4lbkny6B+mCGBjvrEH72G9

Malware Config

Targets

    • Target

      590f835c6b496d8c55dd013ce20f045dd9ff07f2a0846905196f9c6a0e456bb2

    • Size

      277KB

    • MD5

      5ebc7795871def410dbb5e5b29b0a09b

    • SHA1

      cd3101a6e0cac98b89921a8500eb830882fc9561

    • SHA256

      590f835c6b496d8c55dd013ce20f045dd9ff07f2a0846905196f9c6a0e456bb2

    • SHA512

      a6541cfdb7b24826fa76247d42a657697eaae6e5e7c011d1018328ee22aec207e09f5c1de57de91ea0a7b337b860e0f26073ef23ac8d8f729b51372973ee11cb

    • SSDEEP

      6144:AA4l/DknTC3dM7B+mCGBV+UdvrEFp7hKvG9:AA4lbkny6B+mCGBjvrEH72G9

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks