General

  • Target

    5f7c7129729102e461746e2ba77e9eddbb16bf88091c45eb109516c985d87c18

  • Size

    278KB

  • Sample

    241210-hbgpra1rcp

  • MD5

    c176ab540f8b4d32c03bafec6a7b75a4

  • SHA1

    5d48d3fece180efa3a6f6a6e2fb35ff50dd5de92

  • SHA256

    5f7c7129729102e461746e2ba77e9eddbb16bf88091c45eb109516c985d87c18

  • SHA512

    81a8d56d8bac32e1aec46379a5f9804b7d95018e2475f1f9e4ddc49ad746429b83eceb2f447de5c6d6e3ef2b587bc5af7b0f58e011a7058cf0cdf54d6278837e

  • SSDEEP

    6144:1A9l/DRfNmC3dM7B+mCHIBV+UdvrEFp7hK/e:1A9lbRfND6B+mCoBjvrEH7ce

Malware Config

Targets

    • Target

      5f7c7129729102e461746e2ba77e9eddbb16bf88091c45eb109516c985d87c18

    • Size

      278KB

    • MD5

      c176ab540f8b4d32c03bafec6a7b75a4

    • SHA1

      5d48d3fece180efa3a6f6a6e2fb35ff50dd5de92

    • SHA256

      5f7c7129729102e461746e2ba77e9eddbb16bf88091c45eb109516c985d87c18

    • SHA512

      81a8d56d8bac32e1aec46379a5f9804b7d95018e2475f1f9e4ddc49ad746429b83eceb2f447de5c6d6e3ef2b587bc5af7b0f58e011a7058cf0cdf54d6278837e

    • SSDEEP

      6144:1A9l/DRfNmC3dM7B+mCHIBV+UdvrEFp7hK/e:1A9lbRfND6B+mCoBjvrEH7ce

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks