General

  • Target

    Virus.Win32.Floxif.H-82590c46557dc8964fd4f55d4d8b1f2f028f5f82e2fdae3145d986e12187a63fN

  • Size

    132KB

  • Sample

    240915-12r8aawakr

  • MD5

    a8d83d9906980d8cae946fbbde593ec0

  • SHA1

    2f99e12aa4ceb8e083f68d814c168879027c3991

  • SHA256

    82590c46557dc8964fd4f55d4d8b1f2f028f5f82e2fdae3145d986e12187a63f

  • SHA512

    39b52da322ce6309159218808d436abbde6dcdc50f613e6b999612bda9a8f5dc57279ef2344866b041bd11d140d521d50e907bbc752ac435ccfa56256b983ecf

  • SSDEEP

    1536:p5csny9LOZO9DQn8Igt+CTN2s+zheW6BVrqzCJ3bdDY+W14N4NmzWlIA7hKRQE5u:EsnuLVIgt+E2lQBV+UdE+rECWp7hKRQ

Malware Config

Targets

    • Target

      Virus.Win32.Floxif.H-82590c46557dc8964fd4f55d4d8b1f2f028f5f82e2fdae3145d986e12187a63fN

    • Size

      132KB

    • MD5

      a8d83d9906980d8cae946fbbde593ec0

    • SHA1

      2f99e12aa4ceb8e083f68d814c168879027c3991

    • SHA256

      82590c46557dc8964fd4f55d4d8b1f2f028f5f82e2fdae3145d986e12187a63f

    • SHA512

      39b52da322ce6309159218808d436abbde6dcdc50f613e6b999612bda9a8f5dc57279ef2344866b041bd11d140d521d50e907bbc752ac435ccfa56256b983ecf

    • SSDEEP

      1536:p5csny9LOZO9DQn8Igt+CTN2s+zheW6BVrqzCJ3bdDY+W14N4NmzWlIA7hKRQE5u:EsnuLVIgt+E2lQBV+UdE+rECWp7hKRQ

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks