Overview

overview

10

Static

static

1

16c5da9600...2c.exe

windows7-x64

10

16c5da9600...2c.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16c5da96002d54c18dcf6e9b22aa12661068c2e6fc231f9e1028a544de8ea62c

  • Size

    277KB

  • Sample

    241222-wghe5avpel

  • MD5

    62017c419997ae819cf42fe267142473

  • SHA1

    8261232c87d7481a53b0f7beb1820d9ae7c7ef46

  • SHA256

    16c5da96002d54c18dcf6e9b22aa12661068c2e6fc231f9e1028a544de8ea62c

  • SHA512

    4a96a1c9da89570f9c3f57e7e2244685232fbfefad6675d5ef6ec132c28d8d147b3284b624d3fe50b10bac3a18368540b5bfee36be4d1bf25b2891b238786b63

  • SSDEEP

    6144:pAdl/DgkC3dMnB+uCk+BV+UdvrEFp7hKHj:pAdlbgJ+B+uC3BjvrEH7mj

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      16c5da96002d54c18dcf6e9b22aa12661068c2e6fc231f9e1028a544de8ea62c

    • Size

      277KB

    • MD5

      62017c419997ae819cf42fe267142473

    • SHA1

      8261232c87d7481a53b0f7beb1820d9ae7c7ef46

    • SHA256

      16c5da96002d54c18dcf6e9b22aa12661068c2e6fc231f9e1028a544de8ea62c

    • SHA512

      4a96a1c9da89570f9c3f57e7e2244685232fbfefad6675d5ef6ec132c28d8d147b3284b624d3fe50b10bac3a18368540b5bfee36be4d1bf25b2891b238786b63

    • SSDEEP

      6144:pAdl/DgkC3dMnB+uCk+BV+UdvrEFp7hKHj:pAdlbgJ+B+uC3BjvrEH7mj

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks