General
-
Target
2024-11-10_a5ff728278baf1b896468740786ece47_floxif_mafia
-
Size
2.5MB
-
Sample
241110-rvkeesxrax
-
MD5
a5ff728278baf1b896468740786ece47
-
SHA1
a6ece1e2fc582304650134db30320c4e354a03a3
-
SHA256
661bada403786fc9baca2300cbb5dfe46ea726cf04985db4b08621764d403a86
-
SHA512
48e2cdcdc233a8b65fbf1f3911890010e3f4a67459ae4ef50489f40ce2ffa836f8bfcc6aea8edf1abe9976a71ba42c550bdf33d70363c4933411d102c66cec03
-
SSDEEP
49152:pmhcbMDOyZLiYN3iK7qOw7XYym7U4aFvsO1CThFhu7vLruwqf+t+:pmpiyZuYN34Ow7XSU4aFvsO1X7vK
Static task
static1
Behavioral task
behavioral1
Sample
2024-11-10_a5ff728278baf1b896468740786ece47_floxif_mafia.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-11-10_a5ff728278baf1b896468740786ece47_floxif_mafia.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2024-11-10_a5ff728278baf1b896468740786ece47_floxif_mafia
-
Size
2.5MB
-
MD5
a5ff728278baf1b896468740786ece47
-
SHA1
a6ece1e2fc582304650134db30320c4e354a03a3
-
SHA256
661bada403786fc9baca2300cbb5dfe46ea726cf04985db4b08621764d403a86
-
SHA512
48e2cdcdc233a8b65fbf1f3911890010e3f4a67459ae4ef50489f40ce2ffa836f8bfcc6aea8edf1abe9976a71ba42c550bdf33d70363c4933411d102c66cec03
-
SSDEEP
49152:pmhcbMDOyZLiYN3iK7qOw7XYym7U4aFvsO1CThFhu7vLruwqf+t+:pmpiyZuYN34Ow7XSU4aFvsO1X7vK
-
Floxif family
-
Detects Floxif payload
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-