Overview

overview

10

Static

static

1

2024-11-19...ia.exe

windows7-x64

10

2024-11-19...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-19_707f6b9328195e21083a8e9df60c2f81_floxif_mafia

  • Size

    268KB

  • Sample

    241119-ybgmra1hnr

  • MD5

    707f6b9328195e21083a8e9df60c2f81

  • SHA1

    54d5b9ae3751439bbdf0a952c0ce40d00128f16f

  • SHA256

    4fa3a9030e464c7b5b9c102cc4868684e23936082d3a3b45feeeb908a9e25098

  • SHA512

    9877f4b7a58fae4fc96cdcef6dfa6e987da9103a1e2a30fb83a1c84eb86304c370bcab378821bcb9f40543bf77b651cb01304edc8759cc9e083f6205f23694df

  • SSDEEP

    6144:8m1IG9KVG7/jc+6cyUWXkrlPczWBV+UdvrEFp7hKbb:DIG9Z/jbTtW0rlPMWBjvrEH7kb

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-11-19_707f6b9328195e21083a8e9df60c2f81_floxif_mafia

    • Size

      268KB

    • MD5

      707f6b9328195e21083a8e9df60c2f81

    • SHA1

      54d5b9ae3751439bbdf0a952c0ce40d00128f16f

    • SHA256

      4fa3a9030e464c7b5b9c102cc4868684e23936082d3a3b45feeeb908a9e25098

    • SHA512

      9877f4b7a58fae4fc96cdcef6dfa6e987da9103a1e2a30fb83a1c84eb86304c370bcab378821bcb9f40543bf77b651cb01304edc8759cc9e083f6205f23694df

    • SSDEEP

      6144:8m1IG9KVG7/jc+6cyUWXkrlPczWBV+UdvrEFp7hKbb:DIG9Z/jbTtW0rlPMWBjvrEH7kb

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks