Overview

overview

10

Static

static

1

d329f158d1...9d.exe

windows7-x64

10

d329f158d1...9d.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d329f158d1c0ffc8d78937a551bb983ba780a2a4fd44ba01011f27a709673a9d

  • Size

    281KB

  • Sample

    241218-sf66basqgv

  • MD5

    758bc6bd97a61236bc9d4b71afa08754

  • SHA1

    d23cf92b847daa61b003ff92536993169f9b1e28

  • SHA256

    d329f158d1c0ffc8d78937a551bb983ba780a2a4fd44ba01011f27a709673a9d

  • SHA512

    47328de9ca70ded18ed3cc09448626e326105ee9f5ef6075650cc8a3dbdd8ea504aec5a01e24661337a0a4adfcaa1bfb4733c62ca0e94c78ab634da0aca5cf91

  • SSDEEP

    6144:TvAl/DRfkTC3dM7B+GCyusQvMRlkM4RD/qzMfUs/:TolbRfky6B+GCyUMRGM4h/qofv

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      d329f158d1c0ffc8d78937a551bb983ba780a2a4fd44ba01011f27a709673a9d

    • Size

      281KB

    • MD5

      758bc6bd97a61236bc9d4b71afa08754

    • SHA1

      d23cf92b847daa61b003ff92536993169f9b1e28

    • SHA256

      d329f158d1c0ffc8d78937a551bb983ba780a2a4fd44ba01011f27a709673a9d

    • SHA512

      47328de9ca70ded18ed3cc09448626e326105ee9f5ef6075650cc8a3dbdd8ea504aec5a01e24661337a0a4adfcaa1bfb4733c62ca0e94c78ab634da0aca5cf91

    • SSDEEP

      6144:TvAl/DRfkTC3dM7B+GCyusQvMRlkM4RD/qzMfUs/:TolbRfky6B+GCyUMRGM4h/qofv

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Network Service Discovery

      Attempt to gather information on host's network.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks