General

  • Target

    bb6cf8507b769573e6d31b43fa7ed10f30b582bde5e3d1d938f2153169e60e09

  • Size

    76KB

  • MD5

    20cd04349473e13768e9a5502c008041

  • SHA1

    7eb47697601b227aa1b9758c1fd576518a731ee8

  • SHA256

    bb6cf8507b769573e6d31b43fa7ed10f30b582bde5e3d1d938f2153169e60e09

  • SHA512

    5bd3405e3a4481d269e2be3a24adfa713499f8dfab808961afbbd5198775d89b4a68033d09c3364b271c5d3e395e559b06f44cf203aeafa4bb62e44b6f179e43

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZZMiLs:c8y93KQjy7G55riF1cMo033nw

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bb6cf8507b769573e6d31b43fa7ed10f30b582bde5e3d1d938f2153169e60e09
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections