General
-
Target
2024-11-11_d4d8d97c253668da0a3156954fcaa380_bkransomware_floxif_hijackloader
-
Size
14.4MB
-
Sample
241111-prkjxaspbn
-
MD5
d4d8d97c253668da0a3156954fcaa380
-
SHA1
c4d9d6d3ddf675d0899ba7abad8e6f7c34cd756a
-
SHA256
704f980fd23351d44ff8751a6fa161caf409639f6a46fac0e261e6b606967cfb
-
SHA512
8a54a5dfca3c8bb0e21ba2ad3d5cbe425a40c9bddef1ba59daec6b5b9807c864c9ae59252e0a1b958bc5210a372494bee08383e24484fdd46e0e972e2737bf08
-
SSDEEP
98304:8TatQIZETGdOfW0+bs0ZmjBjcaw2lsuze/iBXsLVMZHvOyGCPvPZODByQNdXCd00:86t30t0u/Zk28XCd0LWkVgeXSL
Static task
static1
Behavioral task
behavioral1
Sample
2024-11-11_d4d8d97c253668da0a3156954fcaa380_bkransomware_floxif_hijackloader.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2024-11-11_d4d8d97c253668da0a3156954fcaa380_bkransomware_floxif_hijackloader.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2024-11-11_d4d8d97c253668da0a3156954fcaa380_bkransomware_floxif_hijackloader
-
Size
14.4MB
-
MD5
d4d8d97c253668da0a3156954fcaa380
-
SHA1
c4d9d6d3ddf675d0899ba7abad8e6f7c34cd756a
-
SHA256
704f980fd23351d44ff8751a6fa161caf409639f6a46fac0e261e6b606967cfb
-
SHA512
8a54a5dfca3c8bb0e21ba2ad3d5cbe425a40c9bddef1ba59daec6b5b9807c864c9ae59252e0a1b958bc5210a372494bee08383e24484fdd46e0e972e2737bf08
-
SSDEEP
98304:8TatQIZETGdOfW0+bs0ZmjBjcaw2lsuze/iBXsLVMZHvOyGCPvPZODByQNdXCd00:86t30t0u/Zk28XCd0LWkVgeXSL
-
Floxif family
-
Detects Floxif payload
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
A potential corporate email address has been identified in the URL: [email protected]
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1