Overview

overview

10

Static

static

1

3621d07516...06.exe

windows7-x64

10

3621d07516...06.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3621d07516829d85ac62dbbd19ae28ea41c87c57de4d9a405fb1a218eef28606

  • Size

    277KB

  • Sample

    241210-z6nvzsvjfq

  • MD5

    eef2a279d027cdcd3872e2292e198a5b

  • SHA1

    957bcfeb2f8b4dd196cd6c1e039d91098f816fb5

  • SHA256

    3621d07516829d85ac62dbbd19ae28ea41c87c57de4d9a405fb1a218eef28606

  • SHA512

    359cc2a214464e20383e949201f8a0d07d82872cf4fc9c3cd64a6ef9dc98a7fac28aad29faf7dd2d9db517300f82393e0345ffc6967f660e0c7beb78ea85673e

  • SSDEEP

    6144:Efl/DRfkTC3dMnB++CuBV+UdvrEFp7hKZT:EflbRfky+B++CuBjvrEH7m

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      3621d07516829d85ac62dbbd19ae28ea41c87c57de4d9a405fb1a218eef28606

    • Size

      277KB

    • MD5

      eef2a279d027cdcd3872e2292e198a5b

    • SHA1

      957bcfeb2f8b4dd196cd6c1e039d91098f816fb5

    • SHA256

      3621d07516829d85ac62dbbd19ae28ea41c87c57de4d9a405fb1a218eef28606

    • SHA512

      359cc2a214464e20383e949201f8a0d07d82872cf4fc9c3cd64a6ef9dc98a7fac28aad29faf7dd2d9db517300f82393e0345ffc6967f660e0c7beb78ea85673e

    • SSDEEP

      6144:Efl/DRfkTC3dMnB++CuBV+UdvrEFp7hKZT:EflbRfky+B++CuBjvrEH7m

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks