General

  • Target

    2024-12-29_67f2bde8a102b83230f05c7183905144_floxif_hijackloader_luca-stealer_magniber

  • Size

    6.8MB

  • Sample

    241229-w4mncsvpew

  • MD5

    67f2bde8a102b83230f05c7183905144

  • SHA1

    406145ddf3e669308b4efcaf80e7433b7174b571

  • SHA256

    7af0b97813e8c877b66ea07d64c8ca70bd77664bb2367f750f51349a7c1fb717

  • SHA512

    c5c755b8a6b8a8a890355a6e564a74f01c0b048d1627ef8b35375d421cb9756db0e340c44eeeba8b37e3380bff4a50dcde1555649f3a266facfba4428c79ee34

  • SSDEEP

    98304:30vhWhkxBWyoqIht3aMQPfb6Fw04X1xSg+CNlPSHtzQLy9rFxC:8KkxBW7qgkvFX1xSyP8zQG9rrC

Malware Config

Targets

    • Target

      2024-12-29_67f2bde8a102b83230f05c7183905144_floxif_hijackloader_luca-stealer_magniber

    • Size

      6.8MB

    • MD5

      67f2bde8a102b83230f05c7183905144

    • SHA1

      406145ddf3e669308b4efcaf80e7433b7174b571

    • SHA256

      7af0b97813e8c877b66ea07d64c8ca70bd77664bb2367f750f51349a7c1fb717

    • SHA512

      c5c755b8a6b8a8a890355a6e564a74f01c0b048d1627ef8b35375d421cb9756db0e340c44eeeba8b37e3380bff4a50dcde1555649f3a266facfba4428c79ee34

    • SSDEEP

      98304:30vhWhkxBWyoqIht3aMQPfb6Fw04X1xSg+CNlPSHtzQLy9rFxC:8KkxBW7qgkvFX1xSyP8zQG9rrC

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks