floxif | 46b085539aa271a9c6fe980231c30f6b3c7fbc0bffb6f3bf8fd5d235754bf5c0 | Triage

Submit
Reports

Overview

overview

Static

static

46b085539a...0N.dll

windows7-x64

5

46b085539a...0N.dll

windows10-2004-x64

8

Sharing

General

Target

46b085539aa271a9c6fe980231c30f6b3c7fbc0bffb6f3bf8fd5d235754bf5c0N.exe
Size

76KB
Sample

241219-bygvpssjam
MD5

be438f13a6b8e79495b2e657453e8030
SHA1

1be72108539446f747678273e6a5d7ed8f7991ba
SHA256

46b085539aa271a9c6fe980231c30f6b3c7fbc0bffb6f3bf8fd5d235754bf5c0
SHA512

6fac6aacafeea0db2cbe5bfddf384e2c12b3714d1e76a8f6f11f079cbb6d2a8241481aecbc1e78216f0a62d254c80c0e893f6f5d73fabd3e6187c2c6de6b8946
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zrj:c8y93KQjy7G55riF1cMo03Bj

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

46b085539aa271a9c6fe980231c30f6b3c7fbc0bffb6f3bf8fd5d235754bf5c0N.dll

Resource

win7-20240903-en

windows7-x64

5 signatures

120 seconds

Behavioral task

behavioral2

Sample

46b085539aa271a9c6fe980231c30f6b3c7fbc0bffb6f3bf8fd5d235754bf5c0N.dll

Resource

win10v2004-20241007-en

discovery persistence privilege_escalation upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  46b085539aa271a9c6fe980231c30f6b3c7fbc0bffb6f3bf8fd5d235754bf5c0N.exe
- Size
  
  76KB
- MD5
  
  be438f13a6b8e79495b2e657453e8030
- SHA1
  
  1be72108539446f747678273e6a5d7ed8f7991ba
- SHA256
  
  46b085539aa271a9c6fe980231c30f6b3c7fbc0bffb6f3bf8fd5d235754bf5c0
- SHA512
  
  6fac6aacafeea0db2cbe5bfddf384e2c12b3714d1e76a8f6f11f079cbb6d2a8241481aecbc1e78216f0a62d254c80c0e893f6f5d73fabd3e6187c2c6de6b8946
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zrj:c8y93KQjy7G55riF1cMo03Bj
Score

8^/10

discovery upx persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

behavioral2

discoverypersistenceprivilege_escalationupx

© 2018-2025

Terms | Privacy