Overview

overview

10

Static

static

1

381dbadb16...94.exe

windows7-x64

10

381dbadb16...94.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    381dbadb1613e5fa3e013f69abc6c01b3ee6510a5944b02e3c69c4e0f59a3e94

  • Size

    9.2MB

  • Sample

    241219-2jrz8ssmbl

  • MD5

    414bb575d2734b3cb8939ec6b00bb69d

  • SHA1

    2b5b86126a9cd3ab3ff3d221b61c255c84cdd103

  • SHA256

    381dbadb1613e5fa3e013f69abc6c01b3ee6510a5944b02e3c69c4e0f59a3e94

  • SHA512

    8cf0f3eaf3745cd81c41e3a4395abf30d87cc243d59aef89a18c2e0eebb14a9610131af285c6e9bf92af74fa1d3bc5abc6ba851ad77168c6a805b7c00795c147

  • SSDEEP

    98304:1H3fWjXBdrmqVhxQq05IutOiQwlfatFQzCiClyCNOjuKHONfP6NvUxZXZKvwaQYS:kXEicQb8O98YNZ6wa5Dt2

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

Malware Config

Targets

    • Target

      381dbadb1613e5fa3e013f69abc6c01b3ee6510a5944b02e3c69c4e0f59a3e94

    • Size

      9.2MB

    • MD5

      414bb575d2734b3cb8939ec6b00bb69d

    • SHA1

      2b5b86126a9cd3ab3ff3d221b61c255c84cdd103

    • SHA256

      381dbadb1613e5fa3e013f69abc6c01b3ee6510a5944b02e3c69c4e0f59a3e94

    • SHA512

      8cf0f3eaf3745cd81c41e3a4395abf30d87cc243d59aef89a18c2e0eebb14a9610131af285c6e9bf92af74fa1d3bc5abc6ba851ad77168c6a805b7c00795c147

    • SSDEEP

      98304:1H3fWjXBdrmqVhxQq05IutOiQwlfatFQzCiClyCNOjuKHONfP6NvUxZXZKvwaQYS:kXEicQb8O98YNZ6wa5Dt2

    Score
    10/10
    floxifbackdoordiscoverytrojanupxpersistenceprivilege_escalation

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Network Service Discovery

      Attempt to gather information on host's network.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks