floxif | 4e601c0040daac31dc7aa2f3ce46ecfb3cf5357686a5f4fffc842fb56b0d1e5b

General

Target

4e601c0040daac31dc7aa2f3ce46ecfb3cf5357686a5f4fffc842fb56b0d1e5b
Size

76KB
MD5

d78081c6003aa63f33122910d803ecbf
SHA1

63d95635a5bfe158d6a8a7c74118d8bca41fe908
SHA256

4e601c0040daac31dc7aa2f3ce46ecfb3cf5357686a5f4fffc842fb56b0d1e5b
SHA512

da45f5bca2a4d0c24ba8a68d55e5e73d50138f129aa96ec837cf5d9ddcef45c71b6e2cda6017ce18ad985d83e16183535a836fd4e6e7f8ebf74f48579d13cf86
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z33lk:c8y93KQjy7G55riF1cMo03R3m

Score

10^/10

backdoor upx floxif

Detects Floxif payload 1 IoCs
backdoor

Processes:

resource yara_rule

sample floxif
Floxif family
floxif
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.

Processes:

resource yara_rule

sample acprotect
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	floxif

resource	yara_rule
sample	acprotect

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
4e601c0040daac31dc7aa2f3ce46ecfb3cf5357686a5f4fffc842fb56b0d1e5b
unpack001/out.upx