Overview

overview

10

Static

static

1

2024-12-26...ia.exe

windows7-x64

10

2024-12-26...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-26_3afc8d75a1ea87c6506777ddc2d8ae2a_floxif_mafia

  • Size

    706KB

  • Sample

    241226-qpefjswpbs

  • MD5

    3afc8d75a1ea87c6506777ddc2d8ae2a

  • SHA1

    292e955518e885909accc15b85fa304f772310f9

  • SHA256

    41028428adc18ef9e77bf0c0eac10f261b5481eecbb4db7ccead69c3601e6d52

  • SHA512

    dc82219e910bdef7cf633b5dc8fad63339d2c12a53dd19cd4a3d0f510acf585098b84bca771e190d03208e555de2c7ec31f1f4f300945e54a2b2cc596156fd1a

  • SSDEEP

    12288:up9kyGSuznDK9lEj3mQsUjAtGoCrX2gt5vM0D423BjvrEH7jFC:up99Mea3HsU0t8y4tM0D42VrEH7j8

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-12-26_3afc8d75a1ea87c6506777ddc2d8ae2a_floxif_mafia

    • Size

      706KB

    • MD5

      3afc8d75a1ea87c6506777ddc2d8ae2a

    • SHA1

      292e955518e885909accc15b85fa304f772310f9

    • SHA256

      41028428adc18ef9e77bf0c0eac10f261b5481eecbb4db7ccead69c3601e6d52

    • SHA512

      dc82219e910bdef7cf633b5dc8fad63339d2c12a53dd19cd4a3d0f510acf585098b84bca771e190d03208e555de2c7ec31f1f4f300945e54a2b2cc596156fd1a

    • SSDEEP

      12288:up9kyGSuznDK9lEj3mQsUjAtGoCrX2gt5vM0D423BjvrEH7jFC:up99Mea3HsU0t8y4tM0D42VrEH7j8

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks