floxif | 94be0ac17ed5e43ae5845d4758b95676b32992a909f864aa0431371c1cf1f01e

General

Target

94be0ac17ed5e43ae5845d4758b95676b32992a909f864aa0431371c1cf1f01e
Size

76KB
MD5

633c3f53aee4cb3a29dc3bd75bf6cc89
SHA1

c08561a92dafb1f59bd9d35124e8fbb881ae032f
SHA256

94be0ac17ed5e43ae5845d4758b95676b32992a909f864aa0431371c1cf1f01e
SHA512

c0eaef7833d29fc9d241ddbf7a27a414e2abb9b0eda9888ea59d348a49195829c2b315e11b9d2eae0338ce6890414daac0884ce5f3cd6e45e3ad26f7af7eeb5a
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z7QH+il:c8y93KQjy7G55riF1cMo03BQeil

Score

10^/10

backdoor upx floxif

Detects Floxif payload 1 IoCs
backdoor

Processes:

resource yara_rule

sample floxif
Floxif family
floxif
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.

Processes:

resource yara_rule

sample acprotect
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	floxif

resource	yara_rule
sample	acprotect

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
94be0ac17ed5e43ae5845d4758b95676b32992a909f864aa0431371c1cf1f01e
unpack001/out.upx