Overview

overview

10

Static

static

3

53640fc98a...d3.exe

windows7-x64

10

53640fc98a...d3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53640fc98a7a72e038c6e2369cda0a0a44bdb161f429bae5b9bf382e5f45bdd3

  • Size

    253KB

  • Sample

    241222-2dj3fa1kdy

  • MD5

    c1c5d3c46eea3ba5671873c31331c9da

  • SHA1

    759b6d9312de0a2b48b71c775337b79c7343fdde

  • SHA256

    53640fc98a7a72e038c6e2369cda0a0a44bdb161f429bae5b9bf382e5f45bdd3

  • SHA512

    71ced31eb2ce82cf36ea41897659543c55edf7318098b033126ef8aef6d834355aeef66e073fd9465753f3c11c2776e9751e1f290ad1aa732c8eedb0c723c3ef

  • SSDEEP

    6144:CaNZqIFN2yNdk/TXB615i9NTPjhIBsgKBV+UdvrEFp7hK5:Ca/3Td2Xwn0NjVIBs9BjvrEH7u

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      53640fc98a7a72e038c6e2369cda0a0a44bdb161f429bae5b9bf382e5f45bdd3

    • Size

      253KB

    • MD5

      c1c5d3c46eea3ba5671873c31331c9da

    • SHA1

      759b6d9312de0a2b48b71c775337b79c7343fdde

    • SHA256

      53640fc98a7a72e038c6e2369cda0a0a44bdb161f429bae5b9bf382e5f45bdd3

    • SHA512

      71ced31eb2ce82cf36ea41897659543c55edf7318098b033126ef8aef6d834355aeef66e073fd9465753f3c11c2776e9751e1f290ad1aa732c8eedb0c723c3ef

    • SSDEEP

      6144:CaNZqIFN2yNdk/TXB615i9NTPjhIBsgKBV+UdvrEFp7hK5:Ca/3Td2Xwn0NjVIBs9BjvrEH7u

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks