floxif | c333408dd8f2cb10dccf199efb5a7aca5b507c690365fd87b5c321719afaf664

General

Target

c333408dd8f2cb10dccf199efb5a7aca5b507c690365fd87b5c321719afaf664
Size

76KB
MD5

1e349fc364c339eb0f8673c08f8637ed
SHA1

f69d84ca63cc6f9ae2d556a62f93a9c8484fc7cd
SHA256

c333408dd8f2cb10dccf199efb5a7aca5b507c690365fd87b5c321719afaf664
SHA512

8c7679e3bea47360decf860f307e0dd58ae5cf174bc381928b8bf11bdc3ee7bfb5b0e4f5a13f342acd110f4423e2ea29299c523f9de1fcb90e7935347fc91b47
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZZvmGlraG:c8y93KQjy7G55riF1cMo033uGlrT

Score

10^/10

backdoor upx floxif

Detects Floxif payload 1 IoCs
backdoor

Processes:

resource yara_rule

sample floxif
Floxif family
floxif
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.

Processes:

resource yara_rule

sample acprotect
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	floxif

resource	yara_rule
sample	acprotect

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
c333408dd8f2cb10dccf199efb5a7aca5b507c690365fd87b5c321719afaf664
unpack001/out.upx