Overview

overview

10

Static

static

3

2024-12-11...ia.exe

windows7-x64

10

2024-12-11...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-11_2679b1002ad1357ded2b7bb4ada83cd9_floxif_mafia

  • Size

    408KB

  • Sample

    241211-qznf7syrcj

  • MD5

    2679b1002ad1357ded2b7bb4ada83cd9

  • SHA1

    e9c8a11f495c6ccbe3b47cbf4d3d391610b5c630

  • SHA256

    dd1c28cd833ae5d96392c7337df46715148b0688941c200dd61ac5d51a8e2f3e

  • SHA512

    01c66716da7c666dc7926813cff19948edcb325d4cc1ca9b46029b31d669614aa2c0966a0f311909f66fe0819616639c320beae0a8564d1f1ff5660c3a87c635

  • SSDEEP

    6144:zXE8OI2XVuOhVdupJ7Ybbgnn7a7XzTBhKXHQs0RVBV+UdvrEFp7hKN:z0jfApJjnnunTzKXveVBjvrEH7+

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-12-11_2679b1002ad1357ded2b7bb4ada83cd9_floxif_mafia

    • Size

      408KB

    • MD5

      2679b1002ad1357ded2b7bb4ada83cd9

    • SHA1

      e9c8a11f495c6ccbe3b47cbf4d3d391610b5c630

    • SHA256

      dd1c28cd833ae5d96392c7337df46715148b0688941c200dd61ac5d51a8e2f3e

    • SHA512

      01c66716da7c666dc7926813cff19948edcb325d4cc1ca9b46029b31d669614aa2c0966a0f311909f66fe0819616639c320beae0a8564d1f1ff5660c3a87c635

    • SSDEEP

      6144:zXE8OI2XVuOhVdupJ7Ybbgnn7a7XzTBhKXHQs0RVBV+UdvrEFp7hKN:z0jfApJjnnunTzKXveVBjvrEH7+

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks