floxif | 5a6831ce263807cbbe154de6b67449573417fc605b1a3d6492bd8adab9540af3 | Triage

Submit
Reports

Overview

overview

Static

static

5a6831ce26...f3.dll

windows7-x64

8

5a6831ce26...f3.dll

windows10-2004-x64

8

Sharing

General

Target

5a6831ce263807cbbe154de6b67449573417fc605b1a3d6492bd8adab9540af3.exe
Size

76KB
Sample

241219-ecwnhswnfy
MD5

8cc4222d664d061e4c0a62f40106d1af
SHA1

2cc4247bc08a5aa04a4472e000bcb3328c7e70b9
SHA256

5a6831ce263807cbbe154de6b67449573417fc605b1a3d6492bd8adab9540af3
SHA512

4352a0f8f51d286fe24df47fe949e0c857e5eb5cfb7644e3eec16ca2828d8cb1b5ef5eea85c6467e7e3db41991f16a4d978ea4d5c2afd937c1dfab7afb817faf
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZWS/5FFK:c8y93KQjy7G55riF1cMo03ASBO

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

5a6831ce263807cbbe154de6b67449573417fc605b1a3d6492bd8adab9540af3.dll

Resource

win7-20240903-en

discovery persistence privilege_escalation upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

5a6831ce263807cbbe154de6b67449573417fc605b1a3d6492bd8adab9540af3.dll

Resource

win10v2004-20241007-en

discovery persistence privilege_escalation upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  5a6831ce263807cbbe154de6b67449573417fc605b1a3d6492bd8adab9540af3.exe
- Size
  
  76KB
- MD5
  
  8cc4222d664d061e4c0a62f40106d1af
- SHA1
  
  2cc4247bc08a5aa04a4472e000bcb3328c7e70b9
- SHA256
  
  5a6831ce263807cbbe154de6b67449573417fc605b1a3d6492bd8adab9540af3
- SHA512
  
  4352a0f8f51d286fe24df47fe949e0c857e5eb5cfb7644e3eec16ca2828d8cb1b5ef5eea85c6467e7e3db41991f16a4d978ea4d5c2afd937c1dfab7afb817faf
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZWS/5FFK:c8y93KQjy7G55riF1cMo03ASBO
Score

8^/10

discovery persistence privilege_escalation upx
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

discoverypersistenceprivilege_escalationupx

behavioral2

discoverypersistenceprivilege_escalationupx

© 2018-2025

Terms | Privacy