Overview

overview

10

Static

static

1

Floxif.exe

windows7-x64

10

Floxif.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Floxif.exe

  • Size

    532KB

  • Sample

    241224-ttlxzasjbr

  • MD5

    00add4a97311b2b8b6264674335caab6

  • SHA1

    3688de985909cc9f9fa6e0a4f2e43d986fe6d0ec

  • SHA256

    812af0ec9e1dfd8f48b47fd148bafe6eecb42d0a304bc0e4539750dd23820a7f

  • SHA512

    aaf5dae929e6b5809b77b6a79ab833e548b66fb628afeb20b554d678947494a6804cb3d59bf6bbcb2b14cede1a0609aa41f8e7fe8a7999d578e8b7af7144cb70

  • SSDEEP

    12288:l86GkvJFajbhjTpHjq0dfpT1Oc02XEfGdnGwVUNUnEnAE3F:l8lT9PdpwO0fkGwVUSnEnAoF

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      Floxif.exe

    • Size

      532KB

    • MD5

      00add4a97311b2b8b6264674335caab6

    • SHA1

      3688de985909cc9f9fa6e0a4f2e43d986fe6d0ec

    • SHA256

      812af0ec9e1dfd8f48b47fd148bafe6eecb42d0a304bc0e4539750dd23820a7f

    • SHA512

      aaf5dae929e6b5809b77b6a79ab833e548b66fb628afeb20b554d678947494a6804cb3d59bf6bbcb2b14cede1a0609aa41f8e7fe8a7999d578e8b7af7144cb70

    • SSDEEP

      12288:l86GkvJFajbhjTpHjq0dfpT1Oc02XEfGdnGwVUNUnEnAE3F:l8lT9PdpwO0fkGwVUSnEnAoF

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks