floxif | bae3aec369e5c02465f8afbb7e35819d900c5348d5f56265975470699ff7128b | Triage

Submit
Reports

Overview

overview

Static

static

bae3aec369...8b.dll

windows7-x64

8

bae3aec369...8b.dll

windows10-2004-x64

5

Sharing

General

Target

bae3aec369e5c02465f8afbb7e35819d900c5348d5f56265975470699ff7128b.exe
Size

76KB
Sample

241218-dpqscssjdk
MD5

ef999ce1e08b283a89dfd119ab199db8
SHA1

dcf27c9b074ec44ed6565e533d8e827fb77bd4c0
SHA256

bae3aec369e5c02465f8afbb7e35819d900c5348d5f56265975470699ff7128b
SHA512

f8379e391c50a1ed67c16bf556bcf3249f6fcc243c320a5d53f4d351691531a484217821478044b728cca4bc0fe926bae1788ca648ca475c4adc546dc83c471f
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZaOsfn:c8y93KQjy7G55riF1cMo03+

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

bae3aec369e5c02465f8afbb7e35819d900c5348d5f56265975470699ff7128b.dll

Resource

win7-20240903-en

discovery persistence privilege_escalation upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

bae3aec369e5c02465f8afbb7e35819d900c5348d5f56265975470699ff7128b.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

5 signatures

120 seconds

Malware Config

Targets

- Target
  
  bae3aec369e5c02465f8afbb7e35819d900c5348d5f56265975470699ff7128b.exe
- Size
  
  76KB
- MD5
  
  ef999ce1e08b283a89dfd119ab199db8
- SHA1
  
  dcf27c9b074ec44ed6565e533d8e827fb77bd4c0
- SHA256
  
  bae3aec369e5c02465f8afbb7e35819d900c5348d5f56265975470699ff7128b
- SHA512
  
  f8379e391c50a1ed67c16bf556bcf3249f6fcc243c320a5d53f4d351691531a484217821478044b728cca4bc0fe926bae1788ca648ca475c4adc546dc83c471f
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZaOsfn:c8y93KQjy7G55riF1cMo03+
Score

8^/10

discovery persistence privilege_escalation upx
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

discoverypersistenceprivilege_escalationupx

behavioral2

© 2018-2025

Terms | Privacy