General

  • Target

    2024-12-29_f09a314617870028095236cd2506219a_floxif_mafia

  • Size

    5.8MB

  • Sample

    241229-ydaxzswldv

  • MD5

    f09a314617870028095236cd2506219a

  • SHA1

    d5ddf0e623b763d1758a723f48afc79c1346d315

  • SHA256

    328f033dad3a97eb51c9d9b1561cf703d7376b3d24ec5328a2038cc9b34ee15f

  • SHA512

    c860d537370a2a39132f56051b052002f0dccafa2a60d8dae33f3182bc7cd80f899041b832c58adf8d72deb9b892a6999c9b000a2c0e82066791a1ebcf38393f

  • SSDEEP

    98304:WAPh2maE8/FLGK13R7RIS7M2BsB2tFXFWcQ6DcffluOwi4YJZBRb4fiaBp7o8da7:W2raE8/NBU2EiDcffIU8da7

Malware Config

Targets

    • Target

      2024-12-29_f09a314617870028095236cd2506219a_floxif_mafia

    • Size

      5.8MB

    • MD5

      f09a314617870028095236cd2506219a

    • SHA1

      d5ddf0e623b763d1758a723f48afc79c1346d315

    • SHA256

      328f033dad3a97eb51c9d9b1561cf703d7376b3d24ec5328a2038cc9b34ee15f

    • SHA512

      c860d537370a2a39132f56051b052002f0dccafa2a60d8dae33f3182bc7cd80f899041b832c58adf8d72deb9b892a6999c9b000a2c0e82066791a1ebcf38393f

    • SSDEEP

      98304:WAPh2maE8/FLGK13R7RIS7M2BsB2tFXFWcQ6DcffluOwi4YJZBRb4fiaBp7o8da7:W2raE8/NBU2EiDcffIU8da7

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks