Overview

overview

10

Static

static

3

6ceb87834d...0N.exe

windows7-x64

10

6ceb87834d...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ceb87834d4311d744d08a083185bf1ceddd624ae64bae4c2d03c0d5eb8d37f0N.exe

  • Size

    523KB

  • Sample

    241231-d8bgsasmhp

  • MD5

    d9c7f6a0e838a60a33d151ace86cc500

  • SHA1

    ecf8c1eac0c270d2683973830725bf0a3a2a037c

  • SHA256

    6ceb87834d4311d744d08a083185bf1ceddd624ae64bae4c2d03c0d5eb8d37f0

  • SHA512

    ffc58960b50f59804d9c0e608447eac513eb94b096edc9f88e80546124af564c220f0ebecf8fbff1c363a218381f1fd5cdb67c064095101bfeb0a275ca464c22

  • SSDEEP

    12288:VZt0TZ2J8Xd413Z1+RUtCLcEcfOqBbBjvrEH7S:bYXdq/+FczGmhrEH7S

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      6ceb87834d4311d744d08a083185bf1ceddd624ae64bae4c2d03c0d5eb8d37f0N.exe

    • Size

      523KB

    • MD5

      d9c7f6a0e838a60a33d151ace86cc500

    • SHA1

      ecf8c1eac0c270d2683973830725bf0a3a2a037c

    • SHA256

      6ceb87834d4311d744d08a083185bf1ceddd624ae64bae4c2d03c0d5eb8d37f0

    • SHA512

      ffc58960b50f59804d9c0e608447eac513eb94b096edc9f88e80546124af564c220f0ebecf8fbff1c363a218381f1fd5cdb67c064095101bfeb0a275ca464c22

    • SSDEEP

      12288:VZt0TZ2J8Xd413Z1+RUtCLcEcfOqBbBjvrEH7S:bYXdq/+FczGmhrEH7S

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks