General

  • Target

    b8f452c9639eceba238769d4490fe6cce06f1b6cb1339aa0106c4672efb57482N.exe

  • Size

    150KB

  • Sample

    241219-mcxjtazpht

  • MD5

    7344366c3f392c5643cc97d9c3bccb70

  • SHA1

    5e8ce3c8a9c46c14092801a767686745ba9a9564

  • SHA256

    b8f452c9639eceba238769d4490fe6cce06f1b6cb1339aa0106c4672efb57482

  • SHA512

    460f870e8d943264f4258cf7af81edd879a546da9ee7bdfd6e703f50a1e7b1a6525fcee1ac3849637a3129825a5d91663a9711f47e728682ba87a0359a7a59fe

  • SSDEEP

    3072:KHHZMRNjKySdLjXo5ecbCKnN22lQBV+UdE+rECWp7hKp7Q7W:TWrjgecbC7BV+UdvrEFp7hKp76W

Malware Config

Targets

    • Target

      b8f452c9639eceba238769d4490fe6cce06f1b6cb1339aa0106c4672efb57482N.exe

    • Size

      150KB

    • MD5

      7344366c3f392c5643cc97d9c3bccb70

    • SHA1

      5e8ce3c8a9c46c14092801a767686745ba9a9564

    • SHA256

      b8f452c9639eceba238769d4490fe6cce06f1b6cb1339aa0106c4672efb57482

    • SHA512

      460f870e8d943264f4258cf7af81edd879a546da9ee7bdfd6e703f50a1e7b1a6525fcee1ac3849637a3129825a5d91663a9711f47e728682ba87a0359a7a59fe

    • SSDEEP

      3072:KHHZMRNjKySdLjXo5ecbCKnN22lQBV+UdE+rECWp7hKp7Q7W:TWrjgecbC7BV+UdvrEFp7hKp76W

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks