Overview

overview

10

Static

static

1

2024-12-23...ia.exe

windows7-x64

10

2024-12-23...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-23_8bc4dcf560b87e950126e2e75020c485_floxif_mafia

  • Size

    519KB

  • Sample

    241223-1r91casnby

  • MD5

    8bc4dcf560b87e950126e2e75020c485

  • SHA1

    6332490edcb80671e15f435e57d86928b0e463d7

  • SHA256

    5fc0935467dcb095d2a8640b66ae52de183437df36ac6bb4f959df7386909a22

  • SHA512

    fbba515545d09c742983e76b17e638b87eb5af71ebecc83f66bd7d2512766ce46b65aca3a951a0f29e9f0f730b167675cbbfe03648f68217e4a654cda192f555

  • SSDEEP

    12288:TqyRLu5aCWoevfZ1PUxHmA7AGbd9P4c54e08MGHxBjvrEH7o:T3GeAxHmA7AGDF54e08MGPrEH7o

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-12-23_8bc4dcf560b87e950126e2e75020c485_floxif_mafia

    • Size

      519KB

    • MD5

      8bc4dcf560b87e950126e2e75020c485

    • SHA1

      6332490edcb80671e15f435e57d86928b0e463d7

    • SHA256

      5fc0935467dcb095d2a8640b66ae52de183437df36ac6bb4f959df7386909a22

    • SHA512

      fbba515545d09c742983e76b17e638b87eb5af71ebecc83f66bd7d2512766ce46b65aca3a951a0f29e9f0f730b167675cbbfe03648f68217e4a654cda192f555

    • SSDEEP

      12288:TqyRLu5aCWoevfZ1PUxHmA7AGbd9P4c54e08MGHxBjvrEH7o:T3GeAxHmA7AGDF54e08MGPrEH7o

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks