General

  • Target

    7cbd014458e6df8c64ebf3df5b26a64d1fa603d00beadbc1621431d3a1499daeN.exe

  • Size

    785KB

  • Sample

    241219-yx4peaypdj

  • MD5

    b0a632db38f32e42b530935cedc210e0

  • SHA1

    d574b1bbe7afd45e0d4e861d464ae9dbb946ae63

  • SHA256

    7cbd014458e6df8c64ebf3df5b26a64d1fa603d00beadbc1621431d3a1499dae

  • SHA512

    6ae037812f4eb7a615c4a8c8a204bc9eb8b09a332ba66938b549b25679674a9aef164c1ebdb4dfe043b5544a9b8667065320eb9aab25825bc6ca833fb6e3075f

  • SSDEEP

    12288:lCR0sfbz6HQwSOh+PBFayDTAZju0sBdZ7+Tm8zI5BjvrEH7a:l9GXsJSOM5FayDTAZa0GdZ7M9EnrEH7a

Malware Config

Targets

    • Target

      7cbd014458e6df8c64ebf3df5b26a64d1fa603d00beadbc1621431d3a1499daeN.exe

    • Size

      785KB

    • MD5

      b0a632db38f32e42b530935cedc210e0

    • SHA1

      d574b1bbe7afd45e0d4e861d464ae9dbb946ae63

    • SHA256

      7cbd014458e6df8c64ebf3df5b26a64d1fa603d00beadbc1621431d3a1499dae

    • SHA512

      6ae037812f4eb7a615c4a8c8a204bc9eb8b09a332ba66938b549b25679674a9aef164c1ebdb4dfe043b5544a9b8667065320eb9aab25825bc6ca833fb6e3075f

    • SSDEEP

      12288:lCR0sfbz6HQwSOh+PBFayDTAZju0sBdZ7+Tm8zI5BjvrEH7a:l9GXsJSOM5FayDTAZa0GdZ7M9EnrEH7a

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks