Overview

overview

10

Static

static

10

d6ba579e9d...9N.dll

windows7-x64

5

d6ba579e9d...9N.dll

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6ba579e9da9df1285c4d07f52910f9c166f2fbf3025a228bd64ef7697e1fa49N

  • Size

    76KB

  • MD5

    ec19b4d45f06e2f55efbd559c2c01b70

  • SHA1

    4d091823fe6f0eb710c4d4530f4bf75501987990

  • SHA256

    d6ba579e9da9df1285c4d07f52910f9c166f2fbf3025a228bd64ef7697e1fa49

  • SHA512

    ded444fbfed571308d0e06a266bccc6773260dd4f8d3e4c1c0ae827f38897fc01401d2fde37b92dd1c0d7f2a691689f4caa00a88616c41ba8ca2193694c645b2

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZMfSLa/vI:c8y93KQjy7G55riF1cMo03WrvI

Score
10/10
backdoorupxfloxif

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
    backdoor
  • Floxif family
    floxif
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d6ba579e9da9df1285c4d07f52910f9c166f2fbf3025a228bd64ef7697e1fa49N
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections