General

  • Target

    9d65014399e082345161f274c22328e7255bc573f9502809b1e72c544ffd9be9

  • Size

    277KB

  • Sample

    240913-ycq8ksvgmg

  • MD5

    720673ec6bd33c7f9b0687ee5d998d25

  • SHA1

    18d679e47d94724ed9413cb59e0132d02efc19f6

  • SHA256

    9d65014399e082345161f274c22328e7255bc573f9502809b1e72c544ffd9be9

  • SHA512

    a455a9a4f17807c537cfc0f66df1a0c052eabb7efc9121728fee9f4e49f1a19fe624951da6e6ed9af9c8a80182e0fe2ddc3a9fa4d9928da53e29af78f0852f5c

  • SSDEEP

    6144:a6l/DRfkTC3dM7B+mCGBV+UdvrEFp7hKOB:a6lbRfky6B+mCGBjvrEH7R

Malware Config

Targets

    • Target

      9d65014399e082345161f274c22328e7255bc573f9502809b1e72c544ffd9be9

    • Size

      277KB

    • MD5

      720673ec6bd33c7f9b0687ee5d998d25

    • SHA1

      18d679e47d94724ed9413cb59e0132d02efc19f6

    • SHA256

      9d65014399e082345161f274c22328e7255bc573f9502809b1e72c544ffd9be9

    • SHA512

      a455a9a4f17807c537cfc0f66df1a0c052eabb7efc9121728fee9f4e49f1a19fe624951da6e6ed9af9c8a80182e0fe2ddc3a9fa4d9928da53e29af78f0852f5c

    • SSDEEP

      6144:a6l/DRfkTC3dM7B+mCGBV+UdvrEFp7hKOB:a6lbRfky6B+mCGBjvrEH7R

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks