General

  • Target

    75263efbcaed543a51e5926ce0c91b8f00edfbd433de09ccefa39b138ffe297d

  • Size

    277KB

  • Sample

    241012-h49k8szcqf

  • MD5

    1b6e06f8a720dd1266a7bfd141db4e54

  • SHA1

    18082de5095973a786b1055fac41ac459331f406

  • SHA256

    75263efbcaed543a51e5926ce0c91b8f00edfbd433de09ccefa39b138ffe297d

  • SHA512

    f24ce8134cbe9695a35d9520036aa388ec3143b48039d4df268da09493d6b08d8c836e97e29ef0ddd889f895456ad945ae708ad0ef05f31492fb7ad4f4c40892

  • SSDEEP

    6144:AAhl/DRf9NC3dM7B+mCGBV+UdvrEFp7hKbX:AAhlbRf9E6B+mCGBjvrEH74X

Malware Config

Targets

    • Target

      75263efbcaed543a51e5926ce0c91b8f00edfbd433de09ccefa39b138ffe297d

    • Size

      277KB

    • MD5

      1b6e06f8a720dd1266a7bfd141db4e54

    • SHA1

      18082de5095973a786b1055fac41ac459331f406

    • SHA256

      75263efbcaed543a51e5926ce0c91b8f00edfbd433de09ccefa39b138ffe297d

    • SHA512

      f24ce8134cbe9695a35d9520036aa388ec3143b48039d4df268da09493d6b08d8c836e97e29ef0ddd889f895456ad945ae708ad0ef05f31492fb7ad4f4c40892

    • SSDEEP

      6144:AAhl/DRf9NC3dM7B+mCGBV+UdvrEFp7hKbX:AAhlbRf9E6B+mCGBjvrEH74X

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks