General

  • Target

    2024-12-29_dd18a837c09a7e8e17c2020ada72472d_floxif_icedid

  • Size

    2.2MB

  • Sample

    241229-ptyvba1rdt

  • MD5

    dd18a837c09a7e8e17c2020ada72472d

  • SHA1

    44844efaf63e94655192378db54b3e61c458e886

  • SHA256

    61c6f7171a12e96cc2edd44f11ea93dcea5c939387f26c95b88134703a443bd3

  • SHA512

    6a9a7ca05017b6346fd618bd44cbae3fb7a0648a2114cafd29b342983860dff9c3031515971bbf74d1e88188f9f196bd66e65b01e4e9e2ec905f0cdf9bc85758

  • SSDEEP

    24576:2pc4NDD5GgXTCXB/7IZlRowffWYMHs/D+Urb/cw1l7H0mWDXXsoroixNe0ywIrEF:VgXWBYt/zXRH0TDXXPxkfm

Malware Config

Targets

    • Target

      2024-12-29_dd18a837c09a7e8e17c2020ada72472d_floxif_icedid

    • Size

      2.2MB

    • MD5

      dd18a837c09a7e8e17c2020ada72472d

    • SHA1

      44844efaf63e94655192378db54b3e61c458e886

    • SHA256

      61c6f7171a12e96cc2edd44f11ea93dcea5c939387f26c95b88134703a443bd3

    • SHA512

      6a9a7ca05017b6346fd618bd44cbae3fb7a0648a2114cafd29b342983860dff9c3031515971bbf74d1e88188f9f196bd66e65b01e4e9e2ec905f0cdf9bc85758

    • SSDEEP

      24576:2pc4NDD5GgXTCXB/7IZlRowffWYMHs/D+Urb/cw1l7H0mWDXXsoroixNe0ywIrEF:VgXWBYt/zXRH0TDXXPxkfm

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks