General

  • Target

    76b1ea876aa3b69ec08fd1d06b51bd511cfbeeae83943ccdc66db9f94aeacdf6

  • Size

    247KB

  • Sample

    241216-fxeq6swkes

  • MD5

    953ee4ed522db1ae3adfcf82416082dc

  • SHA1

    28ecd3fb823c3135a182b5d3a47938d55ccd56c2

  • SHA256

    76b1ea876aa3b69ec08fd1d06b51bd511cfbeeae83943ccdc66db9f94aeacdf6

  • SHA512

    25f4c2a6268a52666db6042921d7b324292c46d523dc35afdd3c8807d707ceb7ddc27bf8d4147e4c9706784e0330c578ac56925301a2affa5e2f852f3c60f8d9

  • SSDEEP

    3072:GQPidj5BUl/EeaZL8Z0BFri9WSfWauH9B+QW6dQ5RidzKIfGY/9LzMTB3ZYwNERK:IeaCSgfTudB+W4FBV+UdvrEFp7hK1z

Malware Config

Targets

    • Target

      76b1ea876aa3b69ec08fd1d06b51bd511cfbeeae83943ccdc66db9f94aeacdf6

    • Size

      247KB

    • MD5

      953ee4ed522db1ae3adfcf82416082dc

    • SHA1

      28ecd3fb823c3135a182b5d3a47938d55ccd56c2

    • SHA256

      76b1ea876aa3b69ec08fd1d06b51bd511cfbeeae83943ccdc66db9f94aeacdf6

    • SHA512

      25f4c2a6268a52666db6042921d7b324292c46d523dc35afdd3c8807d707ceb7ddc27bf8d4147e4c9706784e0330c578ac56925301a2affa5e2f852f3c60f8d9

    • SSDEEP

      3072:GQPidj5BUl/EeaZL8Z0BFri9WSfWauH9B+QW6dQ5RidzKIfGY/9LzMTB3ZYwNERK:IeaCSgfTudB+W4FBV+UdvrEFp7hK1z

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks