floxif | bee655d154818984a72b6c9b0bc4bfbe5efc489ef522dee754165f03e7290c7f

General

Target

bee655d154818984a72b6c9b0bc4bfbe5efc489ef522dee754165f03e7290c7f
Size

76KB
MD5

bd49691afa2693a0fbd4081790ba06a9
SHA1

9773e9b6b061dea0215e6655f4ee7049d39884a2
SHA256

bee655d154818984a72b6c9b0bc4bfbe5efc489ef522dee754165f03e7290c7f
SHA512

f8103433f2d7d3478a1f628a5d3da43f784b585e7c4301199bd073cd646bb0b03ab8a6ac24994feb95e9c8c8df1e4f45fbc3506af3ecc9d032aa0b3ac06a198e
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZaJ2b:c8y93KQjy7G55riF1cMo03yG

Score

10^/10

backdoor upx floxif

Detects Floxif payload 1 IoCs
backdoor

Processes:

resource yara_rule

sample floxif
Floxif family
floxif
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.

Processes:

resource yara_rule

sample acprotect
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	floxif

resource	yara_rule
sample	acprotect

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
bee655d154818984a72b6c9b0bc4bfbe5efc489ef522dee754165f03e7290c7f
unpack001/out.upx