floxif | 3d547a8c068b16570d08b6599c6e5436de09af46bea1571a83b54778b2b92b38[.]exe

General

Target

3d547a8c068b16570d08b6599c6e5436de09af46bea1571a83b54778b2b92b38.exe
Size

76KB
MD5

170ab3a4ab60f5dacdb628afbaca99a4
SHA1

45b944bbca212458fa624cc5055e012ab8ef550a
SHA256

3d547a8c068b16570d08b6599c6e5436de09af46bea1571a83b54778b2b92b38
SHA512

b5790c852b0d8d0086af333fe0c2be1d57704c9c9af28ef8d6b92369680c01167c7aa6f2535e60941fed7e99782785b7d7b76e43cab4c179978ca1e1df879879
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZVCxD:c8y93KQjy7G55riF1cMo03I

Score

10^/10

backdoor upx floxif

Detects Floxif payload 1 IoCs
backdoor

Processes:

resource yara_rule

sample floxif
Floxif family
floxif
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.

Processes:

resource yara_rule

sample acprotect
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	floxif

resource	yara_rule
sample	acprotect

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
3d547a8c068b16570d08b6599c6e5436de09af46bea1571a83b54778b2b92b38.exe
unpack001/out.upx