Overview

overview

10

Static

static

10

d5ba3a903d...b2.dll

windows7-x64

5

d5ba3a903d...b2.dll

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5ba3a903d4352af78f3de7b79e0a5d18c7000117b35578e4944f63877271bb2

  • Size

    76KB

  • MD5

    f2750af4f44055075862bae72aef1b1a

  • SHA1

    c7d5e4784c78efeba6b4865f929d569345bca032

  • SHA256

    d5ba3a903d4352af78f3de7b79e0a5d18c7000117b35578e4944f63877271bb2

  • SHA512

    233155382e440d54f7b589aa57ee8be62af174b89657ca6188a427d9b04d99de7a0632b590632fede33e34802307bbb9b9b37b24d8c23dd49e9dad297c0bbd72

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZlimIGCyM:c8y93KQjy7G55riF1cMo03amZM

Score
10/10
backdoorupxfloxif

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
    backdoor
  • Floxif family
    floxif
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d5ba3a903d4352af78f3de7b79e0a5d18c7000117b35578e4944f63877271bb2
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections