General

  • Target

    e74c9a860db47cc4a355e474f32004bba7c9bff527ce6f38dd6d78b83cb4aa2e

  • Size

    286KB

  • Sample

    241215-fzlx9swrfr

  • MD5

    3cb1215df82f342fac77d6980681cfc1

  • SHA1

    38d2b6ed9e5657a0468bcde58b07a5f01e8c0080

  • SHA256

    e74c9a860db47cc4a355e474f32004bba7c9bff527ce6f38dd6d78b83cb4aa2e

  • SHA512

    cdeaa20728b6136322f4290f95e3e6460350e1f5e1f5d3840941c1f0d0e89641b36b2aa3b75e0c1515a6182081c47d25a7c496eb908322b1d15c75cfa3ce5fb3

  • SSDEEP

    6144:N667gKNkhSR/5kHouyXnZhB+R8WHqBV+UdvrEFp7hKQt:N667gKNkhm/JuyXnPB+R8WHqBjvrEH75

Malware Config

Targets

    • Target

      e74c9a860db47cc4a355e474f32004bba7c9bff527ce6f38dd6d78b83cb4aa2e

    • Size

      286KB

    • MD5

      3cb1215df82f342fac77d6980681cfc1

    • SHA1

      38d2b6ed9e5657a0468bcde58b07a5f01e8c0080

    • SHA256

      e74c9a860db47cc4a355e474f32004bba7c9bff527ce6f38dd6d78b83cb4aa2e

    • SHA512

      cdeaa20728b6136322f4290f95e3e6460350e1f5e1f5d3840941c1f0d0e89641b36b2aa3b75e0c1515a6182081c47d25a7c496eb908322b1d15c75cfa3ce5fb3

    • SSDEEP

      6144:N667gKNkhSR/5kHouyXnZhB+R8WHqBV+UdvrEFp7hKQt:N667gKNkhm/JuyXnPB+R8WHqBjvrEH75

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks