Overview

overview

10

Static

static

1

441e397614...8d.exe

windows7-x64

10

441e397614...8d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    441e3976149650a1e4ad62376ed64b0b55fad6989008ed1229fb8cb086c4088d

  • Size

    943KB

  • Sample

    241217-hmthpatrer

  • MD5

    4a09e6999f801eb3081d76f297c1baad

  • SHA1

    abf83efc56b4c2ba65ec1668522652bb03cb1c07

  • SHA256

    441e3976149650a1e4ad62376ed64b0b55fad6989008ed1229fb8cb086c4088d

  • SHA512

    5f7d692589d894b273d153c0a25a7a0f4ec1a116ff46e99cd65e820318dcdba8b3780ccc7968f5f11e69a8dbb18f6ee9dd8d43c5dbdc9e40e272975e7640109c

  • SSDEEP

    24576:OOo5yT/tMbHWc8eC9TqOUk12+lm/HIpUqp91kVlFo1UfmWrEH70:OOowTKbHqlcBInp3kDGqma

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

Malware Config

Targets

    • Target

      441e3976149650a1e4ad62376ed64b0b55fad6989008ed1229fb8cb086c4088d

    • Size

      943KB

    • MD5

      4a09e6999f801eb3081d76f297c1baad

    • SHA1

      abf83efc56b4c2ba65ec1668522652bb03cb1c07

    • SHA256

      441e3976149650a1e4ad62376ed64b0b55fad6989008ed1229fb8cb086c4088d

    • SHA512

      5f7d692589d894b273d153c0a25a7a0f4ec1a116ff46e99cd65e820318dcdba8b3780ccc7968f5f11e69a8dbb18f6ee9dd8d43c5dbdc9e40e272975e7640109c

    • SSDEEP

      24576:OOo5yT/tMbHWc8eC9TqOUk12+lm/HIpUqp91kVlFo1UfmWrEH70:OOowTKbHqlcBInp3kDGqma

    Score
    10/10
    floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks