floxif | a0b4b22f748333e545bf9a00821063b7bff4d6b432a213b58f6fdf119434473a | Triage

Submit
Reports

Overview

overview

Static

static

3

a0b4b22f74...aN.exe

windows7-x64

a0b4b22f74...aN.exe

windows10-2004-x64

Sharing

General

Target

a0b4b22f748333e545bf9a00821063b7bff4d6b432a213b58f6fdf119434473aN.exe
Size

698KB
Sample

241218-j95d5ssncq
MD5

5f69532eb5eb9a4dc6b91de117311b60
SHA1

030efb4f5979e7a6607f9430a23942fdc2f587cc
SHA256

a0b4b22f748333e545bf9a00821063b7bff4d6b432a213b58f6fdf119434473a
SHA512

5a8f6e05c41eefe740059968b50774eede2fcc3e9b6367ce4599b9d9fb96422dc228961716b36eca171ba550ed4492aca2114f50917eb7b1e4168d0fe2b39e0f
SSDEEP

12288:6pygEUSxK+3BLJQTaU7PYeSTWbFI1qGdtza4osfgVWMQJ6BjvrEH7p:OEUSvxLJQTaUEdWxIj/1ohKMrEH7p

Score

10^/10

floxif backdoor discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

a0b4b22f748333e545bf9a00821063b7bff4d6b432a213b58f6fdf119434473aN.exe

Resource

win7-20240903-en

floxif backdoor discovery trojan upx

windows7-x64

11 signatures

120 seconds

Behavioral task

behavioral2

Sample

a0b4b22f748333e545bf9a00821063b7bff4d6b432a213b58f6fdf119434473aN.exe

Resource

win10v2004-20241007-en

floxif backdoor discovery trojan upx

windows10-2004-x64

11 signatures

120 seconds

Malware Config

Targets

- Target
  
  a0b4b22f748333e545bf9a00821063b7bff4d6b432a213b58f6fdf119434473aN.exe
- Size
  
  698KB
- MD5
  
  5f69532eb5eb9a4dc6b91de117311b60
- SHA1
  
  030efb4f5979e7a6607f9430a23942fdc2f587cc
- SHA256
  
  a0b4b22f748333e545bf9a00821063b7bff4d6b432a213b58f6fdf119434473a
- SHA512
  
  5a8f6e05c41eefe740059968b50774eede2fcc3e9b6367ce4599b9d9fb96422dc228961716b36eca171ba550ed4492aca2114f50917eb7b1e4168d0fe2b39e0f
- SSDEEP
  
  12288:6pygEUSxK+3BLJQTaU7PYeSTWbFI1qGdtza4osfgVWMQJ6BjvrEH7p:OEUSvxLJQTaUEdWxIj/1ohKMrEH7p
Score

10^/10

floxif backdoor discovery trojan upx
- Floxif family
  floxif
- Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

floxifbackdoordiscoverytrojanupx

behavioral2

floxifbackdoordiscoverytrojanupx

© 2018-2025

Terms | Privacy