Overview

overview

10

Static

static

1

2bd3837fa0...b6.exe

windows7-x64

10

2bd3837fa0...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2bd3837fa090d20eec699feda5356291d3efbd334ef9024ea48ee43a0c6a15b6

  • Size

    1.9MB

  • Sample

    241219-hy44katphy

  • MD5

    6b80c0d8a9f14e29f70e6bbfb45b4e28

  • SHA1

    7a1f9af67ee379077911fef827116e8f9671b546

  • SHA256

    2bd3837fa090d20eec699feda5356291d3efbd334ef9024ea48ee43a0c6a15b6

  • SHA512

    f837e7712353fa9333fa934b5f3ed758952cb86b29c25f7a62d8bd0f2ff2d5e7bff857aba01ba45825a0dde6ebeaf9e978970d98d7fbf7b1e437641e9c87a636

  • SSDEEP

    49152:I3jkIENdvYFSHJj8sswWuIekWxo1yDmoLTOZlsFfppnBli:I3VEjvYoH+ssLuIekW2QmoLqZlsFfppq

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

Malware Config

Targets

    • Target

      2bd3837fa090d20eec699feda5356291d3efbd334ef9024ea48ee43a0c6a15b6

    • Size

      1.9MB

    • MD5

      6b80c0d8a9f14e29f70e6bbfb45b4e28

    • SHA1

      7a1f9af67ee379077911fef827116e8f9671b546

    • SHA256

      2bd3837fa090d20eec699feda5356291d3efbd334ef9024ea48ee43a0c6a15b6

    • SHA512

      f837e7712353fa9333fa934b5f3ed758952cb86b29c25f7a62d8bd0f2ff2d5e7bff857aba01ba45825a0dde6ebeaf9e978970d98d7fbf7b1e437641e9c87a636

    • SSDEEP

      49152:I3jkIENdvYFSHJj8sswWuIekWxo1yDmoLTOZlsFfppnBli:I3VEjvYoH+ssLuIekW2QmoLqZlsFfppq

    Score
    10/10
    floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks