General

  • Target

    3fb84570075df830326394764363bfcffb51ff6880df6fb21c5cac6637c0fb56

  • Size

    8.2MB

  • Sample

    240926-hm325atbrm

  • MD5

    f152e03c4775488bb3931f812cde6e81

  • SHA1

    d5f5fd6b520ee7507a224f49d9cd31c8b66f1b14

  • SHA256

    3fb84570075df830326394764363bfcffb51ff6880df6fb21c5cac6637c0fb56

  • SHA512

    b9561720c0c1b53320f4f0cb87fb7c80548bf9a9d0ade1fb2efa8cbb7c0e9da14e2ca96d81fd14cbb240dffaa79fa9419fcbb54425ff63a0fcb199dd49643ba7

  • SSDEEP

    196608:86EC1zjn/AXMwPlaLdLBKFC6mZIfOigFgGXJzud:pDjn/AlP8Ldh6SIfOigRz2

Malware Config

Targets

    • Target

      3fb84570075df830326394764363bfcffb51ff6880df6fb21c5cac6637c0fb56

    • Size

      8.2MB

    • MD5

      f152e03c4775488bb3931f812cde6e81

    • SHA1

      d5f5fd6b520ee7507a224f49d9cd31c8b66f1b14

    • SHA256

      3fb84570075df830326394764363bfcffb51ff6880df6fb21c5cac6637c0fb56

    • SHA512

      b9561720c0c1b53320f4f0cb87fb7c80548bf9a9d0ade1fb2efa8cbb7c0e9da14e2ca96d81fd14cbb240dffaa79fa9419fcbb54425ff63a0fcb199dd49643ba7

    • SSDEEP

      196608:86EC1zjn/AXMwPlaLdLBKFC6mZIfOigFgGXJzud:pDjn/AlP8Ldh6SIfOigRz2

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks