General

  • Target

    b6b92f0d7490f6838949d18adf34fda1600fbb88063e78bad3bfa14f3c3d2205N

  • Size

    76KB

  • MD5

    3dc03a484cfc232f1c0972f8e6472930

  • SHA1

    b5922d8c2d41607a31723cf84ef769c963173937

  • SHA256

    b6b92f0d7490f6838949d18adf34fda1600fbb88063e78bad3bfa14f3c3d2205

  • SHA512

    320b7360b6226ff943a2ffaed52b72a5ce07866ca53f8f1900963eec3dbbaadb08f20be3a25d5718c709b4f3fddc199d191d51f0afe757df229c9395957c875f

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZLGf9rgc:c8y93KQjy7G55riF1cMo03cVrgc

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b6b92f0d7490f6838949d18adf34fda1600fbb88063e78bad3bfa14f3c3d2205N
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections