floxif | a7f5e9de3b8db2f681dc9f17e72d765bb7d16a0933d28f732665df316f2da370 | Triage

Submit
Reports

Overview

overview

Static

static

a7f5e9de3b...0N.dll

windows7-x64

8

a7f5e9de3b...0N.dll

windows10-2004-x64

6

Sharing

General

Target

a7f5e9de3b8db2f681dc9f17e72d765bb7d16a0933d28f732665df316f2da370N.exe
Size

80KB
Sample

241231-dbr39stldx
MD5

900ec7504b8a66462c35eec7eb060f70
SHA1

379a7c8910d4480b0f1e93ef7473bf927eb31b2e
SHA256

a7f5e9de3b8db2f681dc9f17e72d765bb7d16a0933d28f732665df316f2da370
SHA512

1cfdc4faf6904d6a2082aae377a578f18ac870c163adcfd419f585c4ce895aee8b1d0e7edf40a0962d6aeffcf684d68f3ced896599f1281842760b07f0fe1df2
SSDEEP

1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPE/Rutge5:5dbwovEVyqgoZmZXWfIdQdRaefPOR7e5

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

a7f5e9de3b8db2f681dc9f17e72d765bb7d16a0933d28f732665df316f2da370N.dll

Resource

win7-20241023-en

discovery persistence privilege_escalation upx

windows7-x64

7 signatures

120 seconds

Behavioral task

behavioral2

Sample

a7f5e9de3b8db2f681dc9f17e72d765bb7d16a0933d28f732665df316f2da370N.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  a7f5e9de3b8db2f681dc9f17e72d765bb7d16a0933d28f732665df316f2da370N.exe
- Size
  
  80KB
- MD5
  
  900ec7504b8a66462c35eec7eb060f70
- SHA1
  
  379a7c8910d4480b0f1e93ef7473bf927eb31b2e
- SHA256
  
  a7f5e9de3b8db2f681dc9f17e72d765bb7d16a0933d28f732665df316f2da370
- SHA512
  
  1cfdc4faf6904d6a2082aae377a578f18ac870c163adcfd419f585c4ce895aee8b1d0e7edf40a0962d6aeffcf684d68f3ced896599f1281842760b07f0fe1df2
- SSDEEP
  
  1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPE/Rutge5:5dbwovEVyqgoZmZXWfIdQdRaefPOR7e5
Score

8^/10

discovery persistence privilege_escalation upx
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

discoverypersistenceprivilege_escalationupx

behavioral2

© 2018-2025

Terms | Privacy