General

  • Target

    30590eac9edf6b86f3094b6527284890cd40f01f887ea26f0a9deac5eb118ef9

  • Size

    1.9MB

  • Sample

    241211-g3a6ls1jbz

  • MD5

    3cd7753232e4dca3d8f6a41670f8c045

  • SHA1

    4fdbcb0e54d8172bc93a5a102f14845230143500

  • SHA256

    30590eac9edf6b86f3094b6527284890cd40f01f887ea26f0a9deac5eb118ef9

  • SHA512

    467cc6759021dd664ca4d1344b395550cd419537702b027b5b7ceb39daee5196e067daedbad85c3eb5050336a2bfaa3fe0bda3a13fc90608469ca7f699618e34

  • SSDEEP

    49152:93dI6XQUh10/pFVoXiEEE3Megg/dX7uNi:93dI6gY10/pFV0BX3Meb/dX7J

Malware Config

Targets

    • Target

      30590eac9edf6b86f3094b6527284890cd40f01f887ea26f0a9deac5eb118ef9

    • Size

      1.9MB

    • MD5

      3cd7753232e4dca3d8f6a41670f8c045

    • SHA1

      4fdbcb0e54d8172bc93a5a102f14845230143500

    • SHA256

      30590eac9edf6b86f3094b6527284890cd40f01f887ea26f0a9deac5eb118ef9

    • SHA512

      467cc6759021dd664ca4d1344b395550cd419537702b027b5b7ceb39daee5196e067daedbad85c3eb5050336a2bfaa3fe0bda3a13fc90608469ca7f699618e34

    • SSDEEP

      49152:93dI6XQUh10/pFVoXiEEE3Megg/dX7uNi:93dI6gY10/pFV0BX3Meb/dX7J

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks