floxif | e3fae5a39876e4e3e4d8b814f11547a08cb49341fd47a3a3d25291d042b5515f

General

Target

e3fae5a39876e4e3e4d8b814f11547a08cb49341fd47a3a3d25291d042b5515f
Size

76KB
MD5

fc46ed2962547a4258a7f17951b8084a
SHA1

a0f9f2a677736e899ea5cf80bf885949afa14e7e
SHA256

e3fae5a39876e4e3e4d8b814f11547a08cb49341fd47a3a3d25291d042b5515f
SHA512

7dab52b4c32a50d71c459d9435058c170d5bb948f89c6f37b8f3eadc0ea0f7d1aa50965422f14a448ad2d1d959e5c765d2a87a59a03dcb3dcdbbe88d2cacf825
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zbzbj:c8y93KQjy7G55riF1cMo039bj

Score

10^/10

backdoor upx floxif

Detects Floxif payload 1 IoCs
backdoor

Processes:

resource yara_rule

sample floxif
Floxif family
floxif
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.

Processes:

resource yara_rule

sample acprotect
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	floxif

resource	yara_rule
sample	acprotect

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
e3fae5a39876e4e3e4d8b814f11547a08cb49341fd47a3a3d25291d042b5515f
unpack001/out.upx