General

  • Target

    2151e2b4248f9fa44caef3393edd8500840423fd7ddf476a3461e7a299a2e88fN

  • Size

    76KB

  • MD5

    7f58ec79b93d60ca4c8dfe08c6fdb930

  • SHA1

    57207cc1cc9e6b5ef05cc303c1bbd4d4264a6137

  • SHA256

    2151e2b4248f9fa44caef3393edd8500840423fd7ddf476a3461e7a299a2e88f

  • SHA512

    88fd3c73dbe55bcf5555fafb1c9604cdd021b31865bd0b43cb746eb364f0aa81ef4872c24c45b4ee84ebe0341a25dc39d04ff67e4e414a5a01f0aaa5f7b02e3a

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z83q6L7j:c8y93KQjy7G55riF1cMo03afL7j

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2151e2b4248f9fa44caef3393edd8500840423fd7ddf476a3461e7a299a2e88fN
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections