Overview

overview

10

Static

static

3

2024-12-11...id.exe

windows7-x64

10

2024-12-11...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-11_f9f682bf23dbac1809b4860eb0f396b7_floxif_icedid

  • Size

    624KB

  • Sample

    241211-w4ac2atmhz

  • MD5

    f9f682bf23dbac1809b4860eb0f396b7

  • SHA1

    e193c7dc15a89dccb8cf01f78fc6a0717c32eed9

  • SHA256

    c1ddc79779fbaa53e112879161a2b8ff746b8665b32d80e32429f2843fbde0f2

  • SHA512

    9f6a9ecc09ae60771f16de5cd5b10f9b276bd7f622a2b71dc529fb15a55ef7f3a99ccdd2fbcae12121ed863f8cec4078a11bc781bfb449f6b21f540977074ded

  • SSDEEP

    12288:ffwihI/3yuTyn7cpJVZLuTKeNNURtvVCnqTmUqnuEEPg6BjvrEH7mzD:HwihI/CwEMnoKeNNUrV1TmU+ulrEH7W

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-12-11_f9f682bf23dbac1809b4860eb0f396b7_floxif_icedid

    • Size

      624KB

    • MD5

      f9f682bf23dbac1809b4860eb0f396b7

    • SHA1

      e193c7dc15a89dccb8cf01f78fc6a0717c32eed9

    • SHA256

      c1ddc79779fbaa53e112879161a2b8ff746b8665b32d80e32429f2843fbde0f2

    • SHA512

      9f6a9ecc09ae60771f16de5cd5b10f9b276bd7f622a2b71dc529fb15a55ef7f3a99ccdd2fbcae12121ed863f8cec4078a11bc781bfb449f6b21f540977074ded

    • SSDEEP

      12288:ffwihI/3yuTyn7cpJVZLuTKeNNURtvVCnqTmUqnuEEPg6BjvrEH7mzD:HwihI/CwEMnoKeNNUrV1TmU+ulrEH7W

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks