floxif | e8331b23f181a32b6911ecfb20c25dd99aec48e18af6b7d2aa3840211277d262

General

Target

e8331b23f181a32b6911ecfb20c25dd99aec48e18af6b7d2aa3840211277d262
Size

76KB
MD5

1ba1484446e9933423cc5f11807c41a6
SHA1

a5c627cbf9e3c4b63fc81e01dbd149f8d667ecc3
SHA256

e8331b23f181a32b6911ecfb20c25dd99aec48e18af6b7d2aa3840211277d262
SHA512

32f523fd4e5fbb7e19070c63078ee05ecc82e83ee7512be5d692549f6bde7fde353a4d0670dc433dcc5891ccdc4faa3a3813161ef263fd0ba03e828152d0a698
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z6i:c8y93KQjy7G55riF1cMo03N

Score

10^/10

backdoor upx floxif

Detects Floxif payload 1 IoCs
backdoor

Processes:

resource yara_rule

sample floxif
Floxif family
floxif
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.

Processes:

resource yara_rule

sample acprotect
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	floxif

resource	yara_rule
sample	acprotect

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
e8331b23f181a32b6911ecfb20c25dd99aec48e18af6b7d2aa3840211277d262
unpack001/out.upx