General

  • Target

    dbf4190a83ef5d826159d0ba81203111acd83ffcf8f5e4de1d33bd70c09712c4

  • Size

    377KB

  • Sample

    241002-1vba7asfmg

  • MD5

    6bc218177176cb8f2531698761015a05

  • SHA1

    2110ecfb23f3e2110f3e6a0e5c0dce43af7384fd

  • SHA256

    dbf4190a83ef5d826159d0ba81203111acd83ffcf8f5e4de1d33bd70c09712c4

  • SHA512

    4109da0199af38454adab5a65798f3da47d7461605c4a91c0d95d98ec43c970d07e59df0ea60749524b8094602a03aa6b56bbbb886e62f5416a698f88f1406bd

  • SSDEEP

    6144:aJ3KbqxdjkUe+wQ+Rm60lb/vtpJYb+QMVUwb2sj6pCrNyBV+UdvrEFp7hK6VBD:ahT1Bb/vtpJYb+QMVUwbBsINyBjvrEH/

Malware Config

Targets

    • Target

      dbf4190a83ef5d826159d0ba81203111acd83ffcf8f5e4de1d33bd70c09712c4

    • Size

      377KB

    • MD5

      6bc218177176cb8f2531698761015a05

    • SHA1

      2110ecfb23f3e2110f3e6a0e5c0dce43af7384fd

    • SHA256

      dbf4190a83ef5d826159d0ba81203111acd83ffcf8f5e4de1d33bd70c09712c4

    • SHA512

      4109da0199af38454adab5a65798f3da47d7461605c4a91c0d95d98ec43c970d07e59df0ea60749524b8094602a03aa6b56bbbb886e62f5416a698f88f1406bd

    • SSDEEP

      6144:aJ3KbqxdjkUe+wQ+Rm60lb/vtpJYb+QMVUwb2sj6pCrNyBV+UdvrEFp7hK6VBD:ahT1Bb/vtpJYb+QMVUwbBsINyBjvrEH/

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks