Overview

overview

10

Static

static

1

842a7080a6...dN.exe

windows7-x64

10

842a7080a6...dN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    842a7080a6ac78c3b7734e8fd51c7dd7299842641f08f8cc9b018bf97673914dN.exe

  • Size

    665KB

  • Sample

    241216-hwjpvazkb1

  • MD5

    3be9298c03c1f4b357278d4c2c77fa50

  • SHA1

    3d8807247523daa39f8a94974229021a380eab92

  • SHA256

    842a7080a6ac78c3b7734e8fd51c7dd7299842641f08f8cc9b018bf97673914d

  • SHA512

    635c73c9adb7645d92e0f22228ca454778f2d4f6eb6f57f612683dc2b3b173c06a540b76c04ccea1c586594b8092f74bf14bb6f98285495baa23d54c96e3468f

  • SSDEEP

    12288:2NdwL7zTAGmmvNOFvXhifnUhhrBoZ5p+cKdxFu2BYGqA8kKEo3+V:UdwvPAGmgevXRhrBu/GO2BYG38kKN+V

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      842a7080a6ac78c3b7734e8fd51c7dd7299842641f08f8cc9b018bf97673914dN.exe

    • Size

      665KB

    • MD5

      3be9298c03c1f4b357278d4c2c77fa50

    • SHA1

      3d8807247523daa39f8a94974229021a380eab92

    • SHA256

      842a7080a6ac78c3b7734e8fd51c7dd7299842641f08f8cc9b018bf97673914d

    • SHA512

      635c73c9adb7645d92e0f22228ca454778f2d4f6eb6f57f612683dc2b3b173c06a540b76c04ccea1c586594b8092f74bf14bb6f98285495baa23d54c96e3468f

    • SSDEEP

      12288:2NdwL7zTAGmmvNOFvXhifnUhhrBoZ5p+cKdxFu2BYGqA8kKEo3+V:UdwvPAGmgevXRhrBu/GO2BYG38kKN+V

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks