floxif | eecdd9414ff60f0d073599269e1f8f0448d2b188460462d725d9c1f56373ec5f

General

Target

eecdd9414ff60f0d073599269e1f8f0448d2b188460462d725d9c1f56373ec5f
Size

76KB
MD5

a6a4bb7c86df40ce153bfdc08c940046
SHA1

8088f1e27b76fdf488346c99f6a82d30433fd371
SHA256

eecdd9414ff60f0d073599269e1f8f0448d2b188460462d725d9c1f56373ec5f
SHA512

e34e3d3d9b92841ab4878fcafaf34649be083299bb66bf06a642a080d1129c427d70f815f8a17f99dc2a7ef19089021f486e681d4b40bc3f2a9ddc1e661d023b
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZacR6:c8y93KQjy7G55riF1cMo03wcR6

Score

10^/10

backdoor upx floxif

Detects Floxif payload 1 IoCs
backdoor

Processes:

resource yara_rule

sample floxif
Floxif family
floxif
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.

Processes:

resource yara_rule

sample acprotect
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	floxif

resource	yara_rule
sample	acprotect

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
eecdd9414ff60f0d073599269e1f8f0448d2b188460462d725d9c1f56373ec5f
unpack001/out.upx