General

  • Target

    f72e7704d2b11b8d087c86722bc559761224bb40625459f917d1caeb0ab5cd2c

  • Size

    278KB

  • Sample

    241119-g5bvxs1mcv

  • MD5

    59a5df7084b53d88229f0413c83de08e

  • SHA1

    ff465d4b15321b455a2d4c24fbd7b8bb3354e4c1

  • SHA256

    f72e7704d2b11b8d087c86722bc559761224bb40625459f917d1caeb0ab5cd2c

  • SHA512

    e4b1bdff9f5e82ccd153627bcd5af3bd57a04e4e72595ea27cdb826662c66a721f876644a51dad9ed9edbfea6ea7f0fad0549f5f97a6866a2f1c02e4284dc12a

  • SSDEEP

    6144:7Sl/DRfkTC3dM7B+GCuBV+UdvrEFp7hKak:7SlbRfky6B+GCuBjvrEH7c

Malware Config

Targets

    • Target

      f72e7704d2b11b8d087c86722bc559761224bb40625459f917d1caeb0ab5cd2c

    • Size

      278KB

    • MD5

      59a5df7084b53d88229f0413c83de08e

    • SHA1

      ff465d4b15321b455a2d4c24fbd7b8bb3354e4c1

    • SHA256

      f72e7704d2b11b8d087c86722bc559761224bb40625459f917d1caeb0ab5cd2c

    • SHA512

      e4b1bdff9f5e82ccd153627bcd5af3bd57a04e4e72595ea27cdb826662c66a721f876644a51dad9ed9edbfea6ea7f0fad0549f5f97a6866a2f1c02e4284dc12a

    • SSDEEP

      6144:7Sl/DRfkTC3dM7B+GCuBV+UdvrEFp7hKak:7SlbRfky6B+GCuBjvrEH7c

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks