General

  • Target

    4204396be017d9802211283422a2275d3844412206ce5f7b2ac5c01083bab8b3N

  • Size

    168KB

  • Sample

    241109-f457psydph

  • MD5

    061cb02040514f9cead17f41a569d650

  • SHA1

    cca96e88868c36da00bf74b4e041a0f530674ad2

  • SHA256

    4204396be017d9802211283422a2275d3844412206ce5f7b2ac5c01083bab8b3

  • SHA512

    1d7d84d3256bf5e7c9fa9a360125b485585d6e281bb8bffe7701ed0426cf48d91b0bdedf60b4a5cdbecad695690b963e4ee68713ace4bbd7c2b920cb3146c8a8

  • SSDEEP

    3072:dNdtUefvrpa7pb9pkzNjqcxIE9Js2lQBV+UdE+rECWp7hKpxjw:sew7V9pk/RKBV+UdvrEFp7hKrw

Malware Config

Targets

    • Target

      4204396be017d9802211283422a2275d3844412206ce5f7b2ac5c01083bab8b3N

    • Size

      168KB

    • MD5

      061cb02040514f9cead17f41a569d650

    • SHA1

      cca96e88868c36da00bf74b4e041a0f530674ad2

    • SHA256

      4204396be017d9802211283422a2275d3844412206ce5f7b2ac5c01083bab8b3

    • SHA512

      1d7d84d3256bf5e7c9fa9a360125b485585d6e281bb8bffe7701ed0426cf48d91b0bdedf60b4a5cdbecad695690b963e4ee68713ace4bbd7c2b920cb3146c8a8

    • SSDEEP

      3072:dNdtUefvrpa7pb9pkzNjqcxIE9Js2lQBV+UdE+rECWp7hKpxjw:sew7V9pk/RKBV+UdvrEFp7hKrw

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks