General

  • Target

    b298f0ea290f97d3fd7b13d72b8272291e800e3c2cc7b49f2eb3282c3a6d2deeN.exe

  • Size

    76KB

  • MD5

    728b2d9d0b7b8c925f6e4d4907006720

  • SHA1

    9fa6c429ba8ff883f2977d721fd4b9ad9c11b5fe

  • SHA256

    b298f0ea290f97d3fd7b13d72b8272291e800e3c2cc7b49f2eb3282c3a6d2dee

  • SHA512

    2c86afd9db794f985e84c89d5a520865103b885122915def43b680814d74318d57e52e7e26e9102dab2250cbd35b8f072dc7a02b18f30eb762388a3e04a219a4

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZU9kQc7Z:c8y93KQjy7G55riF1cMo036k

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b298f0ea290f97d3fd7b13d72b8272291e800e3c2cc7b49f2eb3282c3a6d2deeN.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections