floxif | cd2a15a3f7efb68d9285a3d1cc7c2aaaaa9d7d4a8a2f49f3ee8e6b08f2cb410a | Triage

Submit
Reports

Overview

overview

Static

static

1

cd2a15a3f7...0a.exe

windows7-x64

cd2a15a3f7...0a.exe

windows10-2004-x64

Sharing

General

Target

cd2a15a3f7efb68d9285a3d1cc7c2aaaaa9d7d4a8a2f49f3ee8e6b08f2cb410a
Size

286KB
Sample

241224-r6gsnsznem
MD5

d0f439477ec0578713ba79a7453571dd
SHA1

f79ddbba978ac9d280f3719ef1e3757a6fd2d0a1
SHA256

cd2a15a3f7efb68d9285a3d1cc7c2aaaaa9d7d4a8a2f49f3ee8e6b08f2cb410a
SHA512

be6851c06c5c42ebfa906e4ce35c812876aeefb1569cf6700bef5ad492ffa3b496bf279602e066278b5785aae42a765c655a765396c4b4ff6eade30a504fb8c0
SSDEEP

6144:r7gKNlc5kHouyXnZhB+h8WHlBV+UdvrEFp7hKi1:r7gKNlcJuyXnPB+h8WHlBjvrEH7l1

Score

10^/10

floxif backdoor discovery trojan upx

Static task

static1

Behavioral task

behavioral1

Sample

cd2a15a3f7efb68d9285a3d1cc7c2aaaaa9d7d4a8a2f49f3ee8e6b08f2cb410a.exe

Resource

win7-20241010-en

floxif backdoor discovery trojan upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

cd2a15a3f7efb68d9285a3d1cc7c2aaaaa9d7d4a8a2f49f3ee8e6b08f2cb410a.exe

Resource

win10v2004-20241007-en

floxif backdoor discovery trojan upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  cd2a15a3f7efb68d9285a3d1cc7c2aaaaa9d7d4a8a2f49f3ee8e6b08f2cb410a
- Size
  
  286KB
- MD5
  
  d0f439477ec0578713ba79a7453571dd
- SHA1
  
  f79ddbba978ac9d280f3719ef1e3757a6fd2d0a1
- SHA256
  
  cd2a15a3f7efb68d9285a3d1cc7c2aaaaa9d7d4a8a2f49f3ee8e6b08f2cb410a
- SHA512
  
  be6851c06c5c42ebfa906e4ce35c812876aeefb1569cf6700bef5ad492ffa3b496bf279602e066278b5785aae42a765c655a765396c4b4ff6eade30a504fb8c0
- SSDEEP
  
  6144:r7gKNlc5kHouyXnZhB+h8WHlBV+UdvrEFp7hKi1:r7gKNlcJuyXnPB+h8WHlBjvrEH7l1
Score

10^/10

floxif backdoor discovery trojan upx
- Floxif family
  floxif
- Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

floxifbackdoordiscoverytrojanupx

behavioral2

floxifbackdoordiscoverytrojanupx

© 2018-2025

Terms | Privacy