Overview

overview

10

Static

static

1

2024-12-11...ia.exe

windows7-x64

10

2024-12-11...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-11_e33ebf9ca24357b13f9b4f3a61bbf66e_floxif_mafia

  • Size

    2.6MB

  • Sample

    241211-psdgzsspdv

  • MD5

    e33ebf9ca24357b13f9b4f3a61bbf66e

  • SHA1

    5f2bd5355f94073247b091b36a6cbee1607ac446

  • SHA256

    00ff2442215ed8b46ab9e1ce03bc3c3487c2630d502f3fd3209dd08a23f28cc3

  • SHA512

    3ad7f888e02a1855c1906cc638f994e6011bf659ff5b1d844bb6f9fec5d58a89a4e15a4f7ab72a09c9117ce5040b2193e340fd9452107117083c04ae5f6ec98f

  • SSDEEP

    49152:Kw6c5LN7VSjOmZ1viy920yqWlPlF3RyU9nxvGbbQwf9YFiEd2IRm0Smz4hJd:Yc5LN7CHZAy92iWlPlF3RyU9nhGLfsfY

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-12-11_e33ebf9ca24357b13f9b4f3a61bbf66e_floxif_mafia

    • Size

      2.6MB

    • MD5

      e33ebf9ca24357b13f9b4f3a61bbf66e

    • SHA1

      5f2bd5355f94073247b091b36a6cbee1607ac446

    • SHA256

      00ff2442215ed8b46ab9e1ce03bc3c3487c2630d502f3fd3209dd08a23f28cc3

    • SHA512

      3ad7f888e02a1855c1906cc638f994e6011bf659ff5b1d844bb6f9fec5d58a89a4e15a4f7ab72a09c9117ce5040b2193e340fd9452107117083c04ae5f6ec98f

    • SSDEEP

      49152:Kw6c5LN7VSjOmZ1viy920yqWlPlF3RyU9nxvGbbQwf9YFiEd2IRm0Smz4hJd:Yc5LN7CHZAy92iWlPlF3RyU9nhGLfsfY

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks