General

  • Target

    a5c30b4e35a4b963a9f4c1dfb759bde3df9e0474c6537f98495dc5959db3c3e2

  • Size

    278KB

  • Sample

    241229-3ppbza1jas

  • MD5

    3673b7c2e5446950e720844ec4bf6ec3

  • SHA1

    76f3901d28e673833600b4d0697f193c9dc20e78

  • SHA256

    a5c30b4e35a4b963a9f4c1dfb759bde3df9e0474c6537f98495dc5959db3c3e2

  • SHA512

    fb641242fc7e711e692b0f98a02efb0bbfe442d8040d6394d0d4bd8c27d1912c3b3689109fc622877640967d7481ca70f5a57a5331671c57f86b5a886f870804

  • SSDEEP

    6144:VAhl/EGrTC3dM7B+mCpBV+UdvrEFp7hKgGX:VAhlMGry6B+mCpBjvrEH7zGX

Malware Config

Targets

    • Target

      a5c30b4e35a4b963a9f4c1dfb759bde3df9e0474c6537f98495dc5959db3c3e2

    • Size

      278KB

    • MD5

      3673b7c2e5446950e720844ec4bf6ec3

    • SHA1

      76f3901d28e673833600b4d0697f193c9dc20e78

    • SHA256

      a5c30b4e35a4b963a9f4c1dfb759bde3df9e0474c6537f98495dc5959db3c3e2

    • SHA512

      fb641242fc7e711e692b0f98a02efb0bbfe442d8040d6394d0d4bd8c27d1912c3b3689109fc622877640967d7481ca70f5a57a5331671c57f86b5a886f870804

    • SSDEEP

      6144:VAhl/EGrTC3dM7B+mCpBV+UdvrEFp7hKgGX:VAhlMGry6B+mCpBjvrEH7zGX

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks