floxif | 1be08df5fad3959f56d0c47e78618ec463c7875953e773231fd56bd287e5fbcf | Triage

Submit
Reports

Overview

overview

Static

static

3

1be08df5fa...fN.dll

windows7-x64

1be08df5fa...fN.dll

windows10-2004-x64

Sharing

General

Target

1be08df5fad3959f56d0c47e78618ec463c7875953e773231fd56bd287e5fbcfN.exe
Size

352KB
Sample

241218-g25zlayjdr
MD5

331090c2d8a9818e6e32e8e94f8b2a00
SHA1

ba951018593d13e71578774ad3bee187169e8cd9
SHA256

1be08df5fad3959f56d0c47e78618ec463c7875953e773231fd56bd287e5fbcf
SHA512

7c9b3f51e8546eaa001c85b77abd302b59b9a0fa0819d16673ed17f8f87cfdd6808871b8fb452bd5421a57bbe84cff48dcd5f962d7dfaf48ac9fccce154aaa3b
SSDEEP

6144:h042z/mcLr2BY/EhCdcft75Fs06Yrj81jjOuuDlUBV+UdvrEFp7hK1D7:O42LhrfE64oBjvrEH7aX

Score

10^/10

floxif backdoor discovery persistence privilege_escalation trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1be08df5fad3959f56d0c47e78618ec463c7875953e773231fd56bd287e5fbcfN.dll

Resource

win7-20240903-en

floxif backdoor discovery persistence privilege_escalation trojan upx

windows7-x64

12 signatures

120 seconds

Behavioral task

behavioral2

Sample

1be08df5fad3959f56d0c47e78618ec463c7875953e773231fd56bd287e5fbcfN.dll

Resource

win10v2004-20241007-en

floxif backdoor discovery trojan upx

windows10-2004-x64

11 signatures

120 seconds

Malware Config

Targets

- Target
  
  1be08df5fad3959f56d0c47e78618ec463c7875953e773231fd56bd287e5fbcfN.exe
- Size
  
  352KB
- MD5
  
  331090c2d8a9818e6e32e8e94f8b2a00
- SHA1
  
  ba951018593d13e71578774ad3bee187169e8cd9
- SHA256
  
  1be08df5fad3959f56d0c47e78618ec463c7875953e773231fd56bd287e5fbcf
- SHA512
  
  7c9b3f51e8546eaa001c85b77abd302b59b9a0fa0819d16673ed17f8f87cfdd6808871b8fb452bd5421a57bbe84cff48dcd5f962d7dfaf48ac9fccce154aaa3b
- SSDEEP
  
  6144:h042z/mcLr2BY/EhCdcft75Fs06Yrj81jjOuuDlUBV+UdvrEFp7hK1D7:O42LhrfE64oBjvrEH7aX
Score

10^/10

floxif backdoor discovery persistence privilege_escalation trojan upx
- Floxif family
  floxif
- Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

behavioral2

floxifbackdoordiscoverytrojanupx

© 2018-2025

Terms | Privacy