General

  • Target

    12c11ed0113a395fe4b397478c68805870e9b989bae33be0cfa230bc7a8be0eb

  • Size

    278KB

  • Sample

    241225-s784zsxmhm

  • MD5

    dee2c9517c04e3b4b93ca4e032c66754

  • SHA1

    e29bdab7ede141bb615ffdb390ca918820be89d5

  • SHA256

    12c11ed0113a395fe4b397478c68805870e9b989bae33be0cfa230bc7a8be0eb

  • SHA512

    b42b3dfcdabd8ca6e45696f8896babc093856287a1f1b17b8e5a3d46a519018ee51edca6b48732df2a5c834921e53b5eec8411e8c6e92e3b63717a86bce9b142

  • SSDEEP

    6144:j9A8l/DRfkTC3dM7B+mCHIBV+UdvrEFp7hKh3:j9A8lbRfky6B+mCoBjvrEH7E3

Malware Config

Targets

    • Target

      12c11ed0113a395fe4b397478c68805870e9b989bae33be0cfa230bc7a8be0eb

    • Size

      278KB

    • MD5

      dee2c9517c04e3b4b93ca4e032c66754

    • SHA1

      e29bdab7ede141bb615ffdb390ca918820be89d5

    • SHA256

      12c11ed0113a395fe4b397478c68805870e9b989bae33be0cfa230bc7a8be0eb

    • SHA512

      b42b3dfcdabd8ca6e45696f8896babc093856287a1f1b17b8e5a3d46a519018ee51edca6b48732df2a5c834921e53b5eec8411e8c6e92e3b63717a86bce9b142

    • SSDEEP

      6144:j9A8l/DRfkTC3dM7B+mCHIBV+UdvrEFp7hKh3:j9A8lbRfky6B+mCoBjvrEH7E3

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks