floxif | 87296e6ef060f610d0d792aecb3a7ca1ac5e6ecb4dc696aaabc708af85015a59

General

Target

87296e6ef060f610d0d792aecb3a7ca1ac5e6ecb4dc696aaabc708af85015a59
Size

76KB
MD5

87712215e1646581a94d499b6a8a6364
SHA1

19eb162af7df8c634ed3db5faf998bcba47d28a0
SHA256

87296e6ef060f610d0d792aecb3a7ca1ac5e6ecb4dc696aaabc708af85015a59
SHA512

60aa57b406467449eb74fbf7858a49df14596c4afaf8264049aae950acc5908d76bc76d2bd2af3150dede6eef28932b325117e043cdc9acaefd09c111ab2311f
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZoKxnH2E3:c8y93KQjy7G55riF1cMo03JH2E3

Score

10^/10

backdoor upx floxif

Detects Floxif payload 1 IoCs
backdoor

Processes:

resource yara_rule

sample floxif
Floxif family
floxif
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.

Processes:

resource yara_rule

sample acprotect
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	floxif

resource	yara_rule
sample	acprotect

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
87296e6ef060f610d0d792aecb3a7ca1ac5e6ecb4dc696aaabc708af85015a59
unpack001/out.upx