Overview

overview

10

Static

static

1

2024-12-10...if.exe

windows7-x64

10

2024-12-10...if.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-10_351d8db338473531775513e16c10d247_bkransomware_floxif

  • Size

    209KB

  • Sample

    241210-jahfbsymfx

  • MD5

    351d8db338473531775513e16c10d247

  • SHA1

    42bbcae1e2a55a2fc6a37f62924f24772f8b26ec

  • SHA256

    ce2614feb6ae129ddc2fdb22cc0b4c7980c1015dc4fdc0d4e6d91ea8d2b4ed1e

  • SHA512

    a318ed3bfa5dda229ee7827b43dde2afcdbc81c7909504964ae084adbf12691ead903d9df528b6b42cfe41d96bbcc4f471e4dd78d50401b9dc55f520c77842ac

  • SSDEEP

    3072:Bax4PbI+GptMz4P9e78LMTeI2lQBV+UdE+rECWp7hKDLGZ:BaaC/p8QYBV+UdvrEFp7hKGZ

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-12-10_351d8db338473531775513e16c10d247_bkransomware_floxif

    • Size

      209KB

    • MD5

      351d8db338473531775513e16c10d247

    • SHA1

      42bbcae1e2a55a2fc6a37f62924f24772f8b26ec

    • SHA256

      ce2614feb6ae129ddc2fdb22cc0b4c7980c1015dc4fdc0d4e6d91ea8d2b4ed1e

    • SHA512

      a318ed3bfa5dda229ee7827b43dde2afcdbc81c7909504964ae084adbf12691ead903d9df528b6b42cfe41d96bbcc4f471e4dd78d50401b9dc55f520c77842ac

    • SSDEEP

      3072:Bax4PbI+GptMz4P9e78LMTeI2lQBV+UdE+rECWp7hKDLGZ:BaaC/p8QYBV+UdvrEFp7hKGZ

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks