floxif | 54792c7a5d2c379b47d31a597c7d5bcc01e4ddbd62b5f2291e834c7f2a7ed62e | Triage

Submit
Reports

Overview

overview

Static

static

54792c7a5d...2e.dll

windows7-x64

5

54792c7a5d...2e.dll

windows10-2004-x64

8

Sharing

General

Target

54792c7a5d2c379b47d31a597c7d5bcc01e4ddbd62b5f2291e834c7f2a7ed62e
Size

76KB
Sample

241229-2lr31syphs
MD5

cd6a0b7081c02185fc3a6ee83efd9baf
SHA1

ad266b9a2aa69679eefbcfd2984e0c6cdf5e2984
SHA256

54792c7a5d2c379b47d31a597c7d5bcc01e4ddbd62b5f2291e834c7f2a7ed62e
SHA512

e1feddae62be3e42d9e134afff1fc1d105701c3688d22097eb5298c18366d78940b780cb3bc64d08cd79008ecd74d15496804ee11304ff23dfa7813e9f24cfe6
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z06SK0:c8y93KQjy7G55riF1cMo03dSK0

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

54792c7a5d2c379b47d31a597c7d5bcc01e4ddbd62b5f2291e834c7f2a7ed62e.dll

Resource

win7-20241010-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

54792c7a5d2c379b47d31a597c7d5bcc01e4ddbd62b5f2291e834c7f2a7ed62e.dll

Resource

win10v2004-20241007-en

discovery persistence privilege_escalation upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  54792c7a5d2c379b47d31a597c7d5bcc01e4ddbd62b5f2291e834c7f2a7ed62e
- Size
  
  76KB
- MD5
  
  cd6a0b7081c02185fc3a6ee83efd9baf
- SHA1
  
  ad266b9a2aa69679eefbcfd2984e0c6cdf5e2984
- SHA256
  
  54792c7a5d2c379b47d31a597c7d5bcc01e4ddbd62b5f2291e834c7f2a7ed62e
- SHA512
  
  e1feddae62be3e42d9e134afff1fc1d105701c3688d22097eb5298c18366d78940b780cb3bc64d08cd79008ecd74d15496804ee11304ff23dfa7813e9f24cfe6
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z06SK0:c8y93KQjy7G55riF1cMo03dSK0
Score

8^/10

discovery upx persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

behavioral2

discoverypersistenceprivilege_escalationupx

© 2018-2025

Terms | Privacy