General

  • Target

    274b64ea494c50f75ca7a90e536a8bffb414f9bf552d93959ad06bda65621955

  • Size

    277KB

  • Sample

    241211-12z8wsznhz

  • MD5

    5173965de89aa06768f4fdc2ed7df89b

  • SHA1

    eae2dbad7e897a0c7328d8c86d76f35752d4c59d

  • SHA256

    274b64ea494c50f75ca7a90e536a8bffb414f9bf552d93959ad06bda65621955

  • SHA512

    2a03ba756be53e3f34af035eb582db04b4d97d462c0b98a17a2bc724a248936ed7ad6711f841bacc46073be116794d9421f4ad9009105c8a3553573ee6403550

  • SSDEEP

    6144:LLl/DRfkTC3dM7B+mCivBV+UdvrEFp7hK27:LLlbRfky6B+mCABjvrEH7R

Malware Config

Targets

    • Target

      274b64ea494c50f75ca7a90e536a8bffb414f9bf552d93959ad06bda65621955

    • Size

      277KB

    • MD5

      5173965de89aa06768f4fdc2ed7df89b

    • SHA1

      eae2dbad7e897a0c7328d8c86d76f35752d4c59d

    • SHA256

      274b64ea494c50f75ca7a90e536a8bffb414f9bf552d93959ad06bda65621955

    • SHA512

      2a03ba756be53e3f34af035eb582db04b4d97d462c0b98a17a2bc724a248936ed7ad6711f841bacc46073be116794d9421f4ad9009105c8a3553573ee6403550

    • SSDEEP

      6144:LLl/DRfkTC3dM7B+mCivBV+UdvrEFp7hK27:LLlbRfky6B+mCABjvrEH7R

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks