Overview

overview

10

Static

static

1

0f84aaffb8...bN.exe

windows7-x64

10

0f84aaffb8...bN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f84aaffb832dc70f7d35f96fe945ab46e2c5b30395d95f58c21ecd2987ace3bN.exe

  • Size

    310KB

  • Sample

    241230-tjhgss1rcz

  • MD5

    5593b7df8cb0348722617d58f98f5540

  • SHA1

    771d054fc4b2e0ca63921ee6fe1d520401d5e23e

  • SHA256

    0f84aaffb832dc70f7d35f96fe945ab46e2c5b30395d95f58c21ecd2987ace3b

  • SHA512

    448ecab4766b6bd89d13ec6485c202f8659f4a24c3e445a43c060b85790908f7d5043b645a5799083f342a7d8d5b8a4f708c365ef34041d6b426e988985464d5

  • SSDEEP

    6144:NgmUC6GQxs5ZPyIu4BiFRDbp6kBV+UdvrEFp7hKW1H:6BC6G6Anh+OkBjvrEH7V1H

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

Malware Config

Targets

    • Target

      0f84aaffb832dc70f7d35f96fe945ab46e2c5b30395d95f58c21ecd2987ace3bN.exe

    • Size

      310KB

    • MD5

      5593b7df8cb0348722617d58f98f5540

    • SHA1

      771d054fc4b2e0ca63921ee6fe1d520401d5e23e

    • SHA256

      0f84aaffb832dc70f7d35f96fe945ab46e2c5b30395d95f58c21ecd2987ace3b

    • SHA512

      448ecab4766b6bd89d13ec6485c202f8659f4a24c3e445a43c060b85790908f7d5043b645a5799083f342a7d8d5b8a4f708c365ef34041d6b426e988985464d5

    • SSDEEP

      6144:NgmUC6GQxs5ZPyIu4BiFRDbp6kBV+UdvrEFp7hKW1H:6BC6G6Anh+OkBjvrEH7V1H

    Score
    10/10
    floxifbackdoordiscoverytrojanupxpersistenceprivilege_escalation

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks