Overview

overview

10

Static

static

3

1bc6dc2bd7...73.exe

windows7-x64

10

1bc6dc2bd7...73.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_60a4c4bd4123ceeaa0e9806aa63dceb164091583112ba166d7708335f35edb8c

  • Size

    231KB

  • Sample

    241223-ssab4stjds

  • MD5

    0b5a99e6c739dc01feaf13aac70c6eac

  • SHA1

    e6e31b72fdeedd59af8d24afd4af6dd2c53f8110

  • SHA256

    60a4c4bd4123ceeaa0e9806aa63dceb164091583112ba166d7708335f35edb8c

  • SHA512

    24ed28f6a23a271ac009f6c546c30ec61f106c935a59318315cfcbd983ada823545d08d96c69c77211e460cdcede03de6de88e0a67a3f1fc0c4934182e1ca591

  • SSDEEP

    6144:2exDOtsY6CAVAWRt/D4b9qGt7qsHuR1mj4qWqwEj:VxDCsHvuWwb9q27qOu+e/O

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      1bc6dc2bd7d420c49f410a30bbcf786a7c68a7e324145487edfc8dfb324c6473

    • Size

      347KB

    • MD5

      5e0e9e8a5a59e34b24ae82afb780ee1b

    • SHA1

      b7fcc73c90fc8abdccd0cdd1c2ff306a497461cc

    • SHA256

      1bc6dc2bd7d420c49f410a30bbcf786a7c68a7e324145487edfc8dfb324c6473

    • SHA512

      d7ad21283e25d2b4a6860a23723a7bb7cd3f570471b8072310aa01c321123a2d6dba7fd5b8508431db41d3b75d1d3abcc559160511b8886a6621de862abed502

    • SSDEEP

      6144:hfQDd7cTaaJOg9q3WCXkXOeUyZdKE6gAH0i6ngIBV+UdvrEFp7hKxp:hscTLJ5I3nXCUyZdKoA8BjvrEH7Q

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks