General

  • Target

    f98c446d473bb38346cf490f3942344b613a792c3186b55721e3b387fee41a2e

  • Size

    2.2MB

  • Sample

    240915-dkcd6ssfla

  • MD5

    51e8f5c49c5445936b4ae951bd008f3f

  • SHA1

    f21a1e74dfb17c391e68f84c152da1a78f751191

  • SHA256

    f98c446d473bb38346cf490f3942344b613a792c3186b55721e3b387fee41a2e

  • SHA512

    9287dfa37edd3b2531d964892425f18107f01be14ffd81aa251e5dd0cbea676ef897320a290f3875551731ac2174f1fffaa538d794c1b99f3db970a7adb24905

  • SSDEEP

    24576:aZxL+LhFETIDOZPCISuLDE4vn2s8chh1uFEVd4eiKmbOMqf8h4e0yucrEH7YX:pEsDur/hQKmAOnfb

Malware Config

Targets

    • Target

      f98c446d473bb38346cf490f3942344b613a792c3186b55721e3b387fee41a2e

    • Size

      2.2MB

    • MD5

      51e8f5c49c5445936b4ae951bd008f3f

    • SHA1

      f21a1e74dfb17c391e68f84c152da1a78f751191

    • SHA256

      f98c446d473bb38346cf490f3942344b613a792c3186b55721e3b387fee41a2e

    • SHA512

      9287dfa37edd3b2531d964892425f18107f01be14ffd81aa251e5dd0cbea676ef897320a290f3875551731ac2174f1fffaa538d794c1b99f3db970a7adb24905

    • SSDEEP

      24576:aZxL+LhFETIDOZPCISuLDE4vn2s8chh1uFEVd4eiKmbOMqf8h4e0yucrEH7YX:pEsDur/hQKmAOnfb

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks