floxif | f7f18cba1aca29588d20e03cc23c2bb1a8fe2a351e454b100154d4bdcf616048

General

Target

f7f18cba1aca29588d20e03cc23c2bb1a8fe2a351e454b100154d4bdcf616048
Size

76KB
MD5

ad7bffc75234d5f8c08942dceecc1bf0
SHA1

f94b6771b7e57d7f9e6e9a4c4005e716507852ff
SHA256

f7f18cba1aca29588d20e03cc23c2bb1a8fe2a351e454b100154d4bdcf616048
SHA512

6b878f3707b995ce39801772a931302b3ba23ad8ccae2855445d8facb327a0be881b46aef18a1184c052e5d5219e0c2c5e8e443f0ac3268e3533db58c65e10ff
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZbbGo9:c8y93KQjy7G55riF1cMo03/

Score

10^/10

backdoor upx floxif

Detects Floxif payload 1 IoCs
backdoor

Processes:

resource yara_rule

sample floxif
Floxif family
floxif
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.

Processes:

resource yara_rule

sample acprotect
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	floxif

resource	yara_rule
sample	acprotect

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
f7f18cba1aca29588d20e03cc23c2bb1a8fe2a351e454b100154d4bdcf616048
unpack001/out.upx