floxif | 398bbf5a789061bad3d7ef9a509729c2220a6f85a9a4b9f6b12e051898f7ba92 | Triage

Submit
Reports

Overview

overview

Static

static

398bbf5a78...92.dll

windows7-x64

8

398bbf5a78...92.dll

windows10-2004-x64

5

Sharing

General

Target

398bbf5a789061bad3d7ef9a509729c2220a6f85a9a4b9f6b12e051898f7ba92.exe
Size

76KB
Sample

241225-1se7csyqbx
MD5

19bf57dc4ca7dfdc792d9dfe276cc4a3
SHA1

ea1570add8b24b12c223baa68e8c608ae64bb98f
SHA256

398bbf5a789061bad3d7ef9a509729c2220a6f85a9a4b9f6b12e051898f7ba92
SHA512

edfc27a2373c7f982a1891b46ea11592448dc91dbfd0b7dbb3765027b2968bf377ba2246133ee13bbd23c95c9493bd7941d9b4b8b7305f57f3cc47029141673d
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z87H3R:c8y93KQjy7G55riF1cMo03S7Hh

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

398bbf5a789061bad3d7ef9a509729c2220a6f85a9a4b9f6b12e051898f7ba92.dll

Resource

win7-20240903-en

discovery persistence privilege_escalation upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

398bbf5a789061bad3d7ef9a509729c2220a6f85a9a4b9f6b12e051898f7ba92.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

5 signatures

120 seconds

Malware Config

Targets

- Target
  
  398bbf5a789061bad3d7ef9a509729c2220a6f85a9a4b9f6b12e051898f7ba92.exe
- Size
  
  76KB
- MD5
  
  19bf57dc4ca7dfdc792d9dfe276cc4a3
- SHA1
  
  ea1570add8b24b12c223baa68e8c608ae64bb98f
- SHA256
  
  398bbf5a789061bad3d7ef9a509729c2220a6f85a9a4b9f6b12e051898f7ba92
- SHA512
  
  edfc27a2373c7f982a1891b46ea11592448dc91dbfd0b7dbb3765027b2968bf377ba2246133ee13bbd23c95c9493bd7941d9b4b8b7305f57f3cc47029141673d
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z87H3R:c8y93KQjy7G55riF1cMo03S7Hh
Score

8^/10

discovery persistence privilege_escalation upx
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

discoverypersistenceprivilege_escalationupx

behavioral2

© 2018-2025

Terms | Privacy