Overview

overview

10

Static

static

1

d622f9b4b2...7N.exe

windows7-x64

10

d622f9b4b2...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d622f9b4b2eb65c991d0a2506758837420261299313fb5060946032b69a75ed7N.exe

  • Size

    313KB

  • Sample

    241219-yx2j2sypcr

  • MD5

    6943e297e4f7f03c7ff40a0318572d40

  • SHA1

    800a389fd498ed17b327528e6336c538ce82fe33

  • SHA256

    d622f9b4b2eb65c991d0a2506758837420261299313fb5060946032b69a75ed7

  • SHA512

    707c56c5a07b308403c6999f57a17de2796f4dca149ae982ab75375dcb3f0a891409f25f654e46ba561a11dbeec0062cd34d79c8b9f86de9bfc9f0e5b403b3b3

  • SSDEEP

    6144:mRk4Rj+pH9uthIYR0NEouKZyZzDpc3BV+UdvrEFp7hK6m:cJapdOIYR0NxuY93BjvrEH7tm

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

Malware Config

Targets

    • Target

      d622f9b4b2eb65c991d0a2506758837420261299313fb5060946032b69a75ed7N.exe

    • Size

      313KB

    • MD5

      6943e297e4f7f03c7ff40a0318572d40

    • SHA1

      800a389fd498ed17b327528e6336c538ce82fe33

    • SHA256

      d622f9b4b2eb65c991d0a2506758837420261299313fb5060946032b69a75ed7

    • SHA512

      707c56c5a07b308403c6999f57a17de2796f4dca149ae982ab75375dcb3f0a891409f25f654e46ba561a11dbeec0062cd34d79c8b9f86de9bfc9f0e5b403b3b3

    • SSDEEP

      6144:mRk4Rj+pH9uthIYR0NEouKZyZzDpc3BV+UdvrEFp7hK6m:cJapdOIYR0NxuY93BjvrEH7tm

    Score
    10/10
    floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks