Overview

overview

10

Static

static

1

b6311c0c56...14.exe

windows7-x64

10

b6311c0c56...14.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6311c0c5639cd7f95eb1c9b4d4ada6ccde92405e6623aa423fee7627a35b014

  • Size

    807KB

  • Sample

    241223-hm25tsxkbs

  • MD5

    0638d118d7f167bae2743c00437eca98

  • SHA1

    8abf949f0736ad6e2ae1d7fd1c7f9592cbe39a32

  • SHA256

    b6311c0c5639cd7f95eb1c9b4d4ada6ccde92405e6623aa423fee7627a35b014

  • SHA512

    0d2c9e464a71e40ce5567d97576840145ec265b63d8552d9abb7362f2333c4f6e4052e13a1de293a03831552b9751e0177488abb9d2cd29d4f9fcd9169a6da4b

  • SSDEEP

    24576:tle7I3LbywJ/REBR6M70rRZoHSrS3J+mWrEH7O:/rbWwcR6pfoyrSZ+mM

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

Malware Config

Targets

    • Target

      b6311c0c5639cd7f95eb1c9b4d4ada6ccde92405e6623aa423fee7627a35b014

    • Size

      807KB

    • MD5

      0638d118d7f167bae2743c00437eca98

    • SHA1

      8abf949f0736ad6e2ae1d7fd1c7f9592cbe39a32

    • SHA256

      b6311c0c5639cd7f95eb1c9b4d4ada6ccde92405e6623aa423fee7627a35b014

    • SHA512

      0d2c9e464a71e40ce5567d97576840145ec265b63d8552d9abb7362f2333c4f6e4052e13a1de293a03831552b9751e0177488abb9d2cd29d4f9fcd9169a6da4b

    • SSDEEP

      24576:tle7I3LbywJ/REBR6M70rRZoHSrS3J+mWrEH7O:/rbWwcR6pfoyrSZ+mM

    Score
    10/10
    floxifbackdoordiscoverytrojanupxpersistenceprivilege_escalation

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks