Overview

overview

10

Static

static

1

2024-12-18...ny.exe

windows7-x64

10

2024-12-18...ny.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-18_a061fbb818f6bde424d083d4529f6834_bkransomware_floxif_karagany

  • Size

    971KB

  • Sample

    241218-a5zhnavnft

  • MD5

    a061fbb818f6bde424d083d4529f6834

  • SHA1

    8f0a4e4203a97b7adcbeeccc1d6f8952ec37ae09

  • SHA256

    2a51e2f1f7bb482735e3390a84cb745b0ae8e5bdd1018fe8181d188a9af0832d

  • SHA512

    cdd830d6009c291d2df36f5e1d882c2d7962e5171448759e0ea0a026d34479cc7f915840e0feef433bb889050712030017f30989304f1b6b0923309193e01342

  • SSDEEP

    12288:u5xktWZoK3+REjIU+diRzSkYgQK1QzFXE0owUlg2t9ExxsxJdjwg+Tz+UVnF6wg+:SjX9uwwUlLt9ExmW3yNJBpvq1rEH7A

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-12-18_a061fbb818f6bde424d083d4529f6834_bkransomware_floxif_karagany

    • Size

      971KB

    • MD5

      a061fbb818f6bde424d083d4529f6834

    • SHA1

      8f0a4e4203a97b7adcbeeccc1d6f8952ec37ae09

    • SHA256

      2a51e2f1f7bb482735e3390a84cb745b0ae8e5bdd1018fe8181d188a9af0832d

    • SHA512

      cdd830d6009c291d2df36f5e1d882c2d7962e5171448759e0ea0a026d34479cc7f915840e0feef433bb889050712030017f30989304f1b6b0923309193e01342

    • SSDEEP

      12288:u5xktWZoK3+REjIU+diRzSkYgQK1QzFXE0owUlg2t9ExxsxJdjwg+Tz+UVnF6wg+:SjX9uwwUlLt9ExmW3yNJBpvq1rEH7A

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks