General

  • Target

    851ccf9412bfdc9182e89ac0e0965e65ac4ff73b7cfd7a0f581ff6704e3cd20bN

  • Size

    76KB

  • MD5

    e857b6d3dde82931f62532c9649ef270

  • SHA1

    e677b03402f14f398ed098aab9f08a6e0a8771d5

  • SHA256

    851ccf9412bfdc9182e89ac0e0965e65ac4ff73b7cfd7a0f581ff6704e3cd20b

  • SHA512

    f7705e5ec193b062ed4177c81cb7ce5968e71986d4c8094660770fc14c9a84a73e17558e71b0d5a956a1a5561d6956d7e9370f62c66e965bf3788e20aa6a5d42

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZwQCItC:c8y93KQjy7G55riF1cMo03eNI4

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 851ccf9412bfdc9182e89ac0e0965e65ac4ff73b7cfd7a0f581ff6704e3cd20bN
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections