General

  • Target

    9264f610968ae23fc3d334270513d3fee8edca462d3866f35dacd303eb6d3a54N.exe

  • Size

    945KB

  • Sample

    241225-z49pnsykfj

  • MD5

    8ad2e6449408bb55d2fbb3f64b1a3fd0

  • SHA1

    675d4d993f77bbbfda9ff44716ab4bc33cfe4dac

  • SHA256

    9264f610968ae23fc3d334270513d3fee8edca462d3866f35dacd303eb6d3a54

  • SHA512

    d3d9fc3281ac07b49a7e34dc221076ed83ee033c6e57f46bffb765a7e7c479326fa6a082fe2d1d29d16c75eafe4d21ad07034675b084ece4bab4ebe0425ebbd2

  • SSDEEP

    24576:24O4x8xAxCdUcyezFSjaBHFaNlsqK5/oh6iZf1LUXw/vxN0rEH7O:w4x8xqCGexm8FCspg0iZf1LUXX

Malware Config

Targets

    • Target

      9264f610968ae23fc3d334270513d3fee8edca462d3866f35dacd303eb6d3a54N.exe

    • Size

      945KB

    • MD5

      8ad2e6449408bb55d2fbb3f64b1a3fd0

    • SHA1

      675d4d993f77bbbfda9ff44716ab4bc33cfe4dac

    • SHA256

      9264f610968ae23fc3d334270513d3fee8edca462d3866f35dacd303eb6d3a54

    • SHA512

      d3d9fc3281ac07b49a7e34dc221076ed83ee033c6e57f46bffb765a7e7c479326fa6a082fe2d1d29d16c75eafe4d21ad07034675b084ece4bab4ebe0425ebbd2

    • SSDEEP

      24576:24O4x8xAxCdUcyezFSjaBHFaNlsqK5/oh6iZf1LUXw/vxN0rEH7O:w4x8xqCGexm8FCspg0iZf1LUXX

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks