floxif | 5780f8cc8e4744e9c2459d6e7a7ef63273e21df01e1aaceb57792d70af6581d9 | Triage

Submit
Reports

Overview

overview

Static

static

1

5780f8cc8e...d9.dll

windows7-x64

5780f8cc8e...d9.dll

windows10-2004-x64

Sharing

General

Target

5780f8cc8e4744e9c2459d6e7a7ef63273e21df01e1aaceb57792d70af6581d9
Size

1.6MB
Sample

241209-31raps1mek
MD5

33baf0481bd75c15919956c72179f141
SHA1

8a6814345b1f7643e6b39b33d4fb7ec178b42fc0
SHA256

5780f8cc8e4744e9c2459d6e7a7ef63273e21df01e1aaceb57792d70af6581d9
SHA512

b507a6f7283dfbfd9eb26e3a609e835fc11a6ab8add94ebaacea5cdbdf40e32b52f8e8de6c5a55274e2e7c38d44a5bf2a77e1d90f1738688920d9ccb558ed31f
SSDEEP

24576:EedIJcNVXu2hBHfU+eraM8kOJAoy2eXWDhhOfrRP8HE+NEJfE9/QsnL44Euxo2Ur:dJHflhrGqkbJfEeKLZEux3Ur

Score

10^/10

floxif backdoor discovery persistence privilege_escalation trojan upx

Static task

static1

Behavioral task

behavioral1

Sample

5780f8cc8e4744e9c2459d6e7a7ef63273e21df01e1aaceb57792d70af6581d9.dll

Resource

win7-20240708-en

floxif backdoor discovery persistence privilege_escalation trojan upx

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

5780f8cc8e4744e9c2459d6e7a7ef63273e21df01e1aaceb57792d70af6581d9.dll

Resource

win10v2004-20241007-en

floxif backdoor discovery trojan upx

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  5780f8cc8e4744e9c2459d6e7a7ef63273e21df01e1aaceb57792d70af6581d9
- Size
  
  1.6MB
- MD5
  
  33baf0481bd75c15919956c72179f141
- SHA1
  
  8a6814345b1f7643e6b39b33d4fb7ec178b42fc0
- SHA256
  
  5780f8cc8e4744e9c2459d6e7a7ef63273e21df01e1aaceb57792d70af6581d9
- SHA512
  
  b507a6f7283dfbfd9eb26e3a609e835fc11a6ab8add94ebaacea5cdbdf40e32b52f8e8de6c5a55274e2e7c38d44a5bf2a77e1d90f1738688920d9ccb558ed31f
- SSDEEP
  
  24576:EedIJcNVXu2hBHfU+eraM8kOJAoy2eXWDhhOfrRP8HE+NEJfE9/QsnL44Euxo2Ur:dJHflhrGqkbJfEeKLZEux3Ur
Score

10^/10

floxif backdoor discovery persistence privilege_escalation trojan upx
- Floxif family
  floxif
- Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

behavioral2

floxifbackdoordiscoverytrojanupx

© 2018-2025

Terms | Privacy