floxif | c2731c5438dc9f685cc05c0d6ccafd15ba9820bb1b7a72550d949855e2146e1c | Triage

Submit
Reports

Overview

overview

Static

static

c2731c5438...1c.dll

windows7-x64

8

c2731c5438...1c.dll

windows10-2004-x64

8

Sharing

General

Target

c2731c5438dc9f685cc05c0d6ccafd15ba9820bb1b7a72550d949855e2146e1c.exe
Size

76KB
Sample

241226-fazg3axldn
MD5

30f2916f2c67f6905b4c86952a036e3a
SHA1

dab703aac305619d05467a8ca17b3d359df03e61
SHA256

c2731c5438dc9f685cc05c0d6ccafd15ba9820bb1b7a72550d949855e2146e1c
SHA512

c7a20a8bd759d4dbc836e15e65fe7313b5b01938bac9abd415407cca49084cb57ed45b4e1ac58024a22e936b4c13bfa348b9ba6a6edf837e189d86b425d6ea35
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZlN5h/N2X:c8y93KQjy7G55riF1cMo03l5h/N2X

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

c2731c5438dc9f685cc05c0d6ccafd15ba9820bb1b7a72550d949855e2146e1c.dll

Resource

win7-20240903-en

discovery persistence privilege_escalation upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

c2731c5438dc9f685cc05c0d6ccafd15ba9820bb1b7a72550d949855e2146e1c.dll

Resource

win10v2004-20241007-en

discovery persistence privilege_escalation upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  c2731c5438dc9f685cc05c0d6ccafd15ba9820bb1b7a72550d949855e2146e1c.exe
- Size
  
  76KB
- MD5
  
  30f2916f2c67f6905b4c86952a036e3a
- SHA1
  
  dab703aac305619d05467a8ca17b3d359df03e61
- SHA256
  
  c2731c5438dc9f685cc05c0d6ccafd15ba9820bb1b7a72550d949855e2146e1c
- SHA512
  
  c7a20a8bd759d4dbc836e15e65fe7313b5b01938bac9abd415407cca49084cb57ed45b4e1ac58024a22e936b4c13bfa348b9ba6a6edf837e189d86b425d6ea35
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZlN5h/N2X:c8y93KQjy7G55riF1cMo03l5h/N2X
Score

8^/10

discovery persistence privilege_escalation upx
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

discoverypersistenceprivilege_escalationupx

behavioral2

discoverypersistenceprivilege_escalationupx

© 2018-2025

Terms | Privacy