floxif | c9c774a0e68ae4db95d193b8668c53baff6ef48fe5868c52170009fc43ad0366 | Triage

Submit
Reports

Overview

overview

Static

static

c9c774a0e6...66.dll

windows7-x64

5

c9c774a0e6...66.dll

windows10-2004-x64

8

Sharing

General

Target

c9c774a0e68ae4db95d193b8668c53baff6ef48fe5868c52170009fc43ad0366.exe
Size

76KB
Sample

241218-d5xkvasqbq
MD5

0184d63ac799fc2adb43b8d4c6438deb
SHA1

5aac33d7b47b5c25a7d2cba1ad36968f45daef15
SHA256

c9c774a0e68ae4db95d193b8668c53baff6ef48fe5868c52170009fc43ad0366
SHA512

8e260349ed99147db8b5e1acb725af4067fdff7344fd28c27164fee60230042ce98101a4bd0cb39e81d6d6c72dbd44db351f3a9450061cf40dcf0fdeac9af4a2
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z7JB2bi:c8y93KQjy7G55riF1cMo03bB2m

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

c9c774a0e68ae4db95d193b8668c53baff6ef48fe5868c52170009fc43ad0366.dll

Resource

win7-20241010-en

windows7-x64

5 signatures

120 seconds

Behavioral task

behavioral2

Sample

c9c774a0e68ae4db95d193b8668c53baff6ef48fe5868c52170009fc43ad0366.dll

Resource

win10v2004-20241007-en

discovery persistence privilege_escalation upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  c9c774a0e68ae4db95d193b8668c53baff6ef48fe5868c52170009fc43ad0366.exe
- Size
  
  76KB
- MD5
  
  0184d63ac799fc2adb43b8d4c6438deb
- SHA1
  
  5aac33d7b47b5c25a7d2cba1ad36968f45daef15
- SHA256
  
  c9c774a0e68ae4db95d193b8668c53baff6ef48fe5868c52170009fc43ad0366
- SHA512
  
  8e260349ed99147db8b5e1acb725af4067fdff7344fd28c27164fee60230042ce98101a4bd0cb39e81d6d6c72dbd44db351f3a9450061cf40dcf0fdeac9af4a2
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z7JB2bi:c8y93KQjy7G55riF1cMo03bB2m
Score

8^/10

discovery upx persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

behavioral2

discoverypersistenceprivilege_escalationupx

© 2018-2025

Terms | Privacy