Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

051bbb9a2e...bN.dll

windows7-x64

10

051bbb9a2e...bN.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    051bbb9a2e11a5bcbcf17ae7dd1349efd66e31367a2befeaede58ca933129cabN

  • Size

    295KB

  • Sample

    241012-d18gjs1ble

  • MD5

    b6c753b29306469f27570c1c95026350

  • SHA1

    4d0414e0b3d70eafe916e7866b69a0ece0cb3ebb

  • SHA256

    051bbb9a2e11a5bcbcf17ae7dd1349efd66e31367a2befeaede58ca933129cab

  • SHA512

    3dbbff66ed8acd4df58397aa00745fed474dc8e24d8bef0c85623bedcb0ed5c8f8812cdef9db5320951bb19d1dbe478412c15c289f1a071dc9bcd8d6d1808fff

  • SSDEEP

    6144:X90oBH59BGOJU2piYHQm01XV3BV+UdvrEFp7hKxJ:X90MZ/rvHQvV3BjvrEH7wJ

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

Malware Config

Targets

    • Target

      051bbb9a2e11a5bcbcf17ae7dd1349efd66e31367a2befeaede58ca933129cabN

    • Size

      295KB

    • MD5

      b6c753b29306469f27570c1c95026350

    • SHA1

      4d0414e0b3d70eafe916e7866b69a0ece0cb3ebb

    • SHA256

      051bbb9a2e11a5bcbcf17ae7dd1349efd66e31367a2befeaede58ca933129cab

    • SHA512

      3dbbff66ed8acd4df58397aa00745fed474dc8e24d8bef0c85623bedcb0ed5c8f8812cdef9db5320951bb19d1dbe478412c15c289f1a071dc9bcd8d6d1808fff

    • SSDEEP

      6144:X90oBH59BGOJU2piYHQm01XV3BV+UdvrEFp7hKxJ:X90MZ/rvHQvV3BjvrEH7wJ

    Score
    10/10
    floxifbackdoordiscoverytrojanupxpersistenceprivilege_escalation

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks