Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2024-12-11...if.exe

windows7-x64

10

2024-12-11...if.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-11_66995df451956b9af3a83fec68943da1_bkransomware_floxif

  • Size

    275KB

  • Sample

    241211-y66kcs1qhl

  • MD5

    66995df451956b9af3a83fec68943da1

  • SHA1

    e7e9bd419dbf4f2bac3cefaf84fe16394f4e5a98

  • SHA256

    8208ee3162cef051b9ca7e4ee16adc31c4c4f386669567f5903cda6dfa51bdfb

  • SHA512

    49abc71d518de4c17d88f7b2ec34489b1f91fc3a90e418d71e90eeda44396e3ba1a5e697b7644f5911146fe6e02df5c1b5f9b721044a8e3a7b2f5b6e8f88844a

  • SSDEEP

    6144:92SSn60OyOLjv1nt3KPBV+UdvrEFp7hKkMV:92dn6UOLpnJKPBjvrEH7PMV

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-12-11_66995df451956b9af3a83fec68943da1_bkransomware_floxif

    • Size

      275KB

    • MD5

      66995df451956b9af3a83fec68943da1

    • SHA1

      e7e9bd419dbf4f2bac3cefaf84fe16394f4e5a98

    • SHA256

      8208ee3162cef051b9ca7e4ee16adc31c4c4f386669567f5903cda6dfa51bdfb

    • SHA512

      49abc71d518de4c17d88f7b2ec34489b1f91fc3a90e418d71e90eeda44396e3ba1a5e697b7644f5911146fe6e02df5c1b5f9b721044a8e3a7b2f5b6e8f88844a

    • SSDEEP

      6144:92SSn60OyOLjv1nt3KPBV+UdvrEFp7hKkMV:92dn6UOLpnJKPBjvrEH7PMV

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks