General

  • Target

    2024-11-10_fa9505cefeac7f9404ddd3e78e871158_floxif_mafia

  • Size

    3.9MB

  • Sample

    241110-t212vs1clh

  • MD5

    fa9505cefeac7f9404ddd3e78e871158

  • SHA1

    575e35032d7f87777bcfa8c0a9706d5c88956f18

  • SHA256

    6da79cc2b7f8a32c74a0ca6a430ee3565a5cde2aa70d763c7ce25c0ec29ad9c8

  • SHA512

    a15327390b48fe7c6a0ef69a14b9cb787e9ef210774221f9c8e4e56e8a8580785ae8d837e4e87e430798ce138ed18d9b34b923880d2462413b20b912aba012d4

  • SSDEEP

    98304:1g+ESjoa9kZ6DRwcEtzCyQWuKglLgdQ/Pn9rj+De0nzQUym:1g+ESJ9k6bOuTgmn9rj+DoUp

Malware Config

Targets

    • Target

      2024-11-10_fa9505cefeac7f9404ddd3e78e871158_floxif_mafia

    • Size

      3.9MB

    • MD5

      fa9505cefeac7f9404ddd3e78e871158

    • SHA1

      575e35032d7f87777bcfa8c0a9706d5c88956f18

    • SHA256

      6da79cc2b7f8a32c74a0ca6a430ee3565a5cde2aa70d763c7ce25c0ec29ad9c8

    • SHA512

      a15327390b48fe7c6a0ef69a14b9cb787e9ef210774221f9c8e4e56e8a8580785ae8d837e4e87e430798ce138ed18d9b34b923880d2462413b20b912aba012d4

    • SSDEEP

      98304:1g+ESjoa9kZ6DRwcEtzCyQWuKglLgdQ/Pn9rj+De0nzQUym:1g+ESJ9k6bOuTgmn9rj+DoUp

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks