floxif | 46f23c46c597eb45b4650687fced8ddfcb0b887f893ea250c8d33f46e1592ff7 | Triage

Submit
Reports

Overview

overview

Static

static

46f23c46c5...f7.dll

windows7-x64

5

46f23c46c5...f7.dll

windows10-2004-x64

8

Sharing

General

Target

46f23c46c597eb45b4650687fced8ddfcb0b887f893ea250c8d33f46e1592ff7
Size

76KB
Sample

241218-z3hvka1res
MD5

97b13d17c708a79cc9aa28d2f421f766
SHA1

8212bc77987d350bab9678476fc5979c5cf2c0f0
SHA256

46f23c46c597eb45b4650687fced8ddfcb0b887f893ea250c8d33f46e1592ff7
SHA512

7d580e8d53d21ced78d3e04191f90c33d0a3495f06b7926dc7220971b0ea2f502f3914faa7156173118c4705386c81ff570cb021f5e344fef95e1d80b14c769d
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZZ4a7hHguJ:c8y93KQjy7G55riF1cMo03Ya7hHgw

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

46f23c46c597eb45b4650687fced8ddfcb0b887f893ea250c8d33f46e1592ff7.dll

Resource

win7-20240903-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

46f23c46c597eb45b4650687fced8ddfcb0b887f893ea250c8d33f46e1592ff7.dll

Resource

win10v2004-20241007-en

discovery persistence privilege_escalation upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  46f23c46c597eb45b4650687fced8ddfcb0b887f893ea250c8d33f46e1592ff7
- Size
  
  76KB
- MD5
  
  97b13d17c708a79cc9aa28d2f421f766
- SHA1
  
  8212bc77987d350bab9678476fc5979c5cf2c0f0
- SHA256
  
  46f23c46c597eb45b4650687fced8ddfcb0b887f893ea250c8d33f46e1592ff7
- SHA512
  
  7d580e8d53d21ced78d3e04191f90c33d0a3495f06b7926dc7220971b0ea2f502f3914faa7156173118c4705386c81ff570cb021f5e344fef95e1d80b14c769d
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZZ4a7hHguJ:c8y93KQjy7G55riF1cMo03Ya7hHgw
Score

8^/10

discovery upx persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

behavioral2

discoverypersistenceprivilege_escalationupx

© 2018-2025

Terms | Privacy