Overview

overview

10

Static

static

1

2024-11-19...ia.exe

windows7-x64

10

2024-11-19...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-19_99f4da5fc7d96cf5cbfda4428dfab74d_floxif_mafia

  • Size

    1.8MB

  • Sample

    241119-ca78eszbqq

  • MD5

    99f4da5fc7d96cf5cbfda4428dfab74d

  • SHA1

    a247715ffd64d38509b38a86aa49507af185638b

  • SHA256

    3ba46f8945f345112c2e83129bbecc9ffda8047a4eafb558ab4ba037a7bc23f6

  • SHA512

    ed3fb6667466dfbabc8ece42c308aea7fc6db408267f818ff56dfa164916bd33f025ccc7df1988cc674b8a11876fbdb7b9ba9253a9c54c381fec07305af6a81a

  • SSDEEP

    49152:W5Zp6SIguuBR5+s5pvDwpPUwHvehhFKT8oBaqBeqyZSERu9W0:W5qSfuuhv0pPVehhFMBpBeq0y

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-11-19_99f4da5fc7d96cf5cbfda4428dfab74d_floxif_mafia

    • Size

      1.8MB

    • MD5

      99f4da5fc7d96cf5cbfda4428dfab74d

    • SHA1

      a247715ffd64d38509b38a86aa49507af185638b

    • SHA256

      3ba46f8945f345112c2e83129bbecc9ffda8047a4eafb558ab4ba037a7bc23f6

    • SHA512

      ed3fb6667466dfbabc8ece42c308aea7fc6db408267f818ff56dfa164916bd33f025ccc7df1988cc674b8a11876fbdb7b9ba9253a9c54c381fec07305af6a81a

    • SSDEEP

      49152:W5Zp6SIguuBR5+s5pvDwpPUwHvehhFKT8oBaqBeqyZSERu9W0:W5qSfuuhv0pPVehhFMBpBeq0y

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks