General

  • Target

    aa96b65c82c33ac6c749b48b52be6f763bb8b6eb053d2069a084fa2355c05954

  • Size

    278KB

  • Sample

    241213-gxddsazqex

  • MD5

    387db2c31f469ef819303dd9fb4b9d20

  • SHA1

    19765315baf127298bcef3c65e217c125a53b675

  • SHA256

    aa96b65c82c33ac6c749b48b52be6f763bb8b6eb053d2069a084fa2355c05954

  • SHA512

    c180ab55c5c601b9ad74499df9d9adad30241c241cfd21a1965aae3d16f9b6da05b01303ca0383e76158406954032497cde8925f4f0c2c47c4d75b190632351e

  • SSDEEP

    6144:EuAkl/DRfkTC3dM7B+mCcBV+UdvrEFp7hKZL:EuAklbRfky6B+mCcBjvrEH70L

Malware Config

Targets

    • Target

      aa96b65c82c33ac6c749b48b52be6f763bb8b6eb053d2069a084fa2355c05954

    • Size

      278KB

    • MD5

      387db2c31f469ef819303dd9fb4b9d20

    • SHA1

      19765315baf127298bcef3c65e217c125a53b675

    • SHA256

      aa96b65c82c33ac6c749b48b52be6f763bb8b6eb053d2069a084fa2355c05954

    • SHA512

      c180ab55c5c601b9ad74499df9d9adad30241c241cfd21a1965aae3d16f9b6da05b01303ca0383e76158406954032497cde8925f4f0c2c47c4d75b190632351e

    • SSDEEP

      6144:EuAkl/DRfkTC3dM7B+mCcBV+UdvrEFp7hKZL:EuAklbRfky6B+mCcBjvrEH70L

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks