General

  • Target

    4cc8f999f51c0e46de0aa373311d3890N

  • Size

    130KB

  • Sample

    240915-a2cjqawenp

  • MD5

    4cc8f999f51c0e46de0aa373311d3890

  • SHA1

    32e59c3b745f22615a226542349ce4d9af646a90

  • SHA256

    beea4ad6f5ffba5b9a8bf0b05634865ac9440e82e10b5947324281631c1eac4a

  • SHA512

    52b6721cb58b3a612e5d72c08ed1c898ede4465b328cfd01f2375d146b64afb6e0c5311739c64a80a827709fb61884db0fc284c74a3f57c6a3ce0db67d823c3f

  • SSDEEP

    3072:FS52WLZ6AnTBfiFeT+W2lQBV+UdE+rECWp7hK/r:m2WLtnTBqFeT5BV+UdvrEFp7hKj

Malware Config

Targets

    • Target

      4cc8f999f51c0e46de0aa373311d3890N

    • Size

      130KB

    • MD5

      4cc8f999f51c0e46de0aa373311d3890

    • SHA1

      32e59c3b745f22615a226542349ce4d9af646a90

    • SHA256

      beea4ad6f5ffba5b9a8bf0b05634865ac9440e82e10b5947324281631c1eac4a

    • SHA512

      52b6721cb58b3a612e5d72c08ed1c898ede4465b328cfd01f2375d146b64afb6e0c5311739c64a80a827709fb61884db0fc284c74a3f57c6a3ce0db67d823c3f

    • SSDEEP

      3072:FS52WLZ6AnTBfiFeT+W2lQBV+UdE+rECWp7hK/r:m2WLtnTBqFeT5BV+UdvrEFp7hKj

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks