General

  • Target

    2024-12-22_6851f55b4c335a434836c1292ce8e051_floxif_icedid

  • Size

    2.2MB

  • Sample

    241222-plx8taykgp

  • MD5

    6851f55b4c335a434836c1292ce8e051

  • SHA1

    be2b12a971c01a303f94fd0fcfd5f84a03c20faa

  • SHA256

    ca4a49a9dfe4e6f3f178f1ddffea752446b2c8fa8163cbaaae454972ad60e782

  • SHA512

    5203a55e88ce79ba4dcc37dae5c60d0576b806213b2c111dd7d555cdff8fce890fd7c01db70def06ae9c4f1b5f467ee6efba126de528d76631cf1520b9a522ff

  • SSDEEP

    24576:2pc4NDD5GgXTCNB/7IQlRowffWYMHs/D+Urb/cw1l7H0mKDXXsoroixNe0ywIrEB:VgXWaYt/zXRH0bDXXPxkfK

Malware Config

Targets

    • Target

      2024-12-22_6851f55b4c335a434836c1292ce8e051_floxif_icedid

    • Size

      2.2MB

    • MD5

      6851f55b4c335a434836c1292ce8e051

    • SHA1

      be2b12a971c01a303f94fd0fcfd5f84a03c20faa

    • SHA256

      ca4a49a9dfe4e6f3f178f1ddffea752446b2c8fa8163cbaaae454972ad60e782

    • SHA512

      5203a55e88ce79ba4dcc37dae5c60d0576b806213b2c111dd7d555cdff8fce890fd7c01db70def06ae9c4f1b5f467ee6efba126de528d76631cf1520b9a522ff

    • SSDEEP

      24576:2pc4NDD5GgXTCNB/7IQlRowffWYMHs/D+Urb/cw1l7H0mKDXXsoroixNe0ywIrEB:VgXWaYt/zXRH0bDXXPxkfK

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks