General

  • Target

    7280b06e65efe22baf26d31b1f5eff17ad07701c6d2b5b2964d11f0dae0f2f94

  • Size

    277KB

  • Sample

    241213-xze86axngw

  • MD5

    affdc812f71f0820a6be188a35c0d32d

  • SHA1

    7699869c2223527e636734a19dc70608df9720b0

  • SHA256

    7280b06e65efe22baf26d31b1f5eff17ad07701c6d2b5b2964d11f0dae0f2f94

  • SHA512

    fa9260c431d286637c151efb7ff6c8876908f8cf4e29a179045c9aebb4e7f04ff16135ebad6847e4adeff4606872e2eeeb98744c99a687d63ed4fc2eab602258

  • SSDEEP

    6144:hAol/DRff6C3dM7B+GCSBV+UdvrEFp7hKKJ:hAolbRff36B+GCSBjvrEH7hJ

Malware Config

Targets

    • Target

      7280b06e65efe22baf26d31b1f5eff17ad07701c6d2b5b2964d11f0dae0f2f94

    • Size

      277KB

    • MD5

      affdc812f71f0820a6be188a35c0d32d

    • SHA1

      7699869c2223527e636734a19dc70608df9720b0

    • SHA256

      7280b06e65efe22baf26d31b1f5eff17ad07701c6d2b5b2964d11f0dae0f2f94

    • SHA512

      fa9260c431d286637c151efb7ff6c8876908f8cf4e29a179045c9aebb4e7f04ff16135ebad6847e4adeff4606872e2eeeb98744c99a687d63ed4fc2eab602258

    • SSDEEP

      6144:hAol/DRff6C3dM7B+GCSBV+UdvrEFp7hKKJ:hAolbRff36B+GCSBjvrEH7hJ

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks