Overview

overview

10

Static

static

1

2024-12-18...ia.exe

windows7-x64

10

2024-12-18...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-18_2f2d6e9fa93c51a1246e5fada7311f8b_floxif_mafia

  • Size

    3.9MB

  • Sample

    241218-me4e5swmck

  • MD5

    2f2d6e9fa93c51a1246e5fada7311f8b

  • SHA1

    569e666e2048beedd9d81df83768a8494f62388b

  • SHA256

    d8f75a64170054810fe0f7333ba1afee2ecf82b551a26045bad008cd69e51c43

  • SHA512

    60353d081eaead8bc9431cead6f5fb48771079024e4478a128d8412ed69ee9bf226eabe2213914403bdb9ec4a49d677bc29885d24cd4cc6b42a60a689a4ab5c3

  • SSDEEP

    98304:1g+Esjoa9kZ6DRwcEtzCyQWuKglLgyQ/Pn9rj+De0nzQUyH:1g+EsJ9k6bOuTgln9rj+DoUw

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-12-18_2f2d6e9fa93c51a1246e5fada7311f8b_floxif_mafia

    • Size

      3.9MB

    • MD5

      2f2d6e9fa93c51a1246e5fada7311f8b

    • SHA1

      569e666e2048beedd9d81df83768a8494f62388b

    • SHA256

      d8f75a64170054810fe0f7333ba1afee2ecf82b551a26045bad008cd69e51c43

    • SHA512

      60353d081eaead8bc9431cead6f5fb48771079024e4478a128d8412ed69ee9bf226eabe2213914403bdb9ec4a49d677bc29885d24cd4cc6b42a60a689a4ab5c3

    • SSDEEP

      98304:1g+Esjoa9kZ6DRwcEtzCyQWuKglLgyQ/Pn9rj+De0nzQUyH:1g+EsJ9k6bOuTgln9rj+DoUw

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks