General

  • Target

    022b84652919bb3730afed5c9d7d901dd0531ac6cde874327bf16fdf3dd0e44e

  • Size

    277KB

  • Sample

    241119-ht6rla1fph

  • MD5

    6c905f3c9119286ce10a63ed48b8ab52

  • SHA1

    d1bb7c477b6a3e0d52b42ca154ad467c021520f4

  • SHA256

    022b84652919bb3730afed5c9d7d901dd0531ac6cde874327bf16fdf3dd0e44e

  • SHA512

    09aac27a50b6239129120391e4e45b7649613d1df07585947f2e6d873dc90babe430a0b123797de8571ea9494bff1c3e497e5dd3655578f9a28d2714d45c276e

  • SSDEEP

    6144:BAiwkTC3dM7B+GCyKBV+UdvrEFp7hKfGN:BAiwky6B+GCyKBjvrEH7IGN

Malware Config

Targets

    • Target

      022b84652919bb3730afed5c9d7d901dd0531ac6cde874327bf16fdf3dd0e44e

    • Size

      277KB

    • MD5

      6c905f3c9119286ce10a63ed48b8ab52

    • SHA1

      d1bb7c477b6a3e0d52b42ca154ad467c021520f4

    • SHA256

      022b84652919bb3730afed5c9d7d901dd0531ac6cde874327bf16fdf3dd0e44e

    • SHA512

      09aac27a50b6239129120391e4e45b7649613d1df07585947f2e6d873dc90babe430a0b123797de8571ea9494bff1c3e497e5dd3655578f9a28d2714d45c276e

    • SSDEEP

      6144:BAiwkTC3dM7B+GCyKBV+UdvrEFp7hKfGN:BAiwky6B+GCyKBjvrEH7IGN

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks