floxif | 4c228202985e2e7aee22ce643638777904b7723fd40b3844946f3344ab16ca2e[.]exe

General

Target

4c228202985e2e7aee22ce643638777904b7723fd40b3844946f3344ab16ca2e.exe
Size

76KB
MD5

4078577f80d37c1fa94df6b4b6f7ff60
SHA1

d4e90ab73a40305dcb22b4ca630ee0c116bcfdbf
SHA256

4c228202985e2e7aee22ce643638777904b7723fd40b3844946f3344ab16ca2e
SHA512

4e641bd225a3dbba83923e6df7d60defa4fa5f1655c5610e36e488d0f97ab8b3de2b070a5ba7850e11eb37d1660b9b5be840fe3814175795b51464e119b73655
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zi7ut91:c8y93KQjy7G55riF1cMo03z

Score

10^/10

backdoor upx floxif

Detects Floxif payload 1 IoCs
backdoor

Processes:

resource yara_rule

sample floxif
Floxif family
floxif
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.

Processes:

resource yara_rule

sample acprotect
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	floxif

resource	yara_rule
sample	acprotect

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
4c228202985e2e7aee22ce643638777904b7723fd40b3844946f3344ab16ca2e.exe
unpack001/out.upx