Overview

overview

10

Static

static

1

4bde9da179...fN.exe

windows7-x64

4bde9da179...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4bde9da1797d010b32313fec6aebd5bef6f8e9c9f01745ab1569880de1db262fN.exe

  • Size

    3.7MB

  • Sample

    241119-dgvfksyrft

  • MD5

    fdee1f6b44abb7bc3a808046d964ba20

  • SHA1

    c6675ff9ba2a2f4167ab6bc8420619640346d117

  • SHA256

    4bde9da1797d010b32313fec6aebd5bef6f8e9c9f01745ab1569880de1db262f

  • SHA512

    bed289fc0a6a4501cfdbef1167b67c48deeb6cd1783687bde221c612f095b565ab61a0000c19ffce4047ca3aa9aff445327555779fe59f4dab6b626bcf3fbf81

  • SSDEEP

    98304:IWMpvfckkBJM/tBFENRK+pvpIpW1afQtU1/j:IWMpvfpq2BELKmvYx

Score
10/10
floxifbackdoordiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      4bde9da1797d010b32313fec6aebd5bef6f8e9c9f01745ab1569880de1db262fN.exe

    • Size

      3.7MB

    • MD5

      fdee1f6b44abb7bc3a808046d964ba20

    • SHA1

      c6675ff9ba2a2f4167ab6bc8420619640346d117

    • SHA256

      4bde9da1797d010b32313fec6aebd5bef6f8e9c9f01745ab1569880de1db262f

    • SHA512

      bed289fc0a6a4501cfdbef1167b67c48deeb6cd1783687bde221c612f095b565ab61a0000c19ffce4047ca3aa9aff445327555779fe59f4dab6b626bcf3fbf81

    • SSDEEP

      98304:IWMpvfckkBJM/tBFENRK+pvpIpW1afQtU1/j:IWMpvfpq2BELKmvYx

    Score
    10/10
    floxifbackdoordiscoverypersistencetrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks