General

  • Target

    4f6ea991579616bdf161acdd4f07f3e3c21fc409c012ae35921527429ffc7594N

  • Size

    76KB

  • MD5

    d4f6d1c5c3e626ad2b8329394b466a60

  • SHA1

    748504c73b7372cb6cfb4d4ba493d40006fd78e0

  • SHA256

    4f6ea991579616bdf161acdd4f07f3e3c21fc409c012ae35921527429ffc7594

  • SHA512

    23f4266b975d5f3792759000f55c738d4e1d3ab77bffd64e00ad90c24168721a4bae5a74f8e21d33444e1ce6e3bba4489125665a921d3584b00fc02b73c2793a

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZSUd+x:c8y93KQjy7G55riF1cMo03FW

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f6ea991579616bdf161acdd4f07f3e3c21fc409c012ae35921527429ffc7594N
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections