General

  • Target

    53ec2284af739cd20b1610431c4ade205271c8e3b5a385d10eb57b51d4b90976

  • Size

    287KB

  • Sample

    241004-vvkxqswekj

  • MD5

    2ddaa4e23d3536c146e27f67d64e2917

  • SHA1

    b2b7ec165d08ddea46dca84c9ee2fd2449729253

  • SHA256

    53ec2284af739cd20b1610431c4ade205271c8e3b5a385d10eb57b51d4b90976

  • SHA512

    446a2aad9e4805fd3227694f73578d58fe2c17e7c0f416ca3c8837db9a79eebdf5ebddf51fe899f1fb6e4d796800f530f339e025ac938b7a6fee36826336ffc3

  • SSDEEP

    6144:dzTuN9afTJ1kHjSuyXTZBB+R8WpMBV+UdvrEFp7hKNY:dzTuN9abJGSuyXTvB+R8WiBjvrEH7aY

Malware Config

Targets

    • Target

      53ec2284af739cd20b1610431c4ade205271c8e3b5a385d10eb57b51d4b90976

    • Size

      287KB

    • MD5

      2ddaa4e23d3536c146e27f67d64e2917

    • SHA1

      b2b7ec165d08ddea46dca84c9ee2fd2449729253

    • SHA256

      53ec2284af739cd20b1610431c4ade205271c8e3b5a385d10eb57b51d4b90976

    • SHA512

      446a2aad9e4805fd3227694f73578d58fe2c17e7c0f416ca3c8837db9a79eebdf5ebddf51fe899f1fb6e4d796800f530f339e025ac938b7a6fee36826336ffc3

    • SSDEEP

      6144:dzTuN9afTJ1kHjSuyXTZBB+R8WpMBV+UdvrEFp7hKNY:dzTuN9abJGSuyXTvB+R8WiBjvrEH7aY

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks