floxif | b637aab62951152ef53d4093b8aaa2fd366742c847d715a04e224af57ddb1613 | Triage

Submit
Reports

Overview

overview

Static

static

b637aab629...13.dll

windows7-x64

8

b637aab629...13.dll

windows10-2004-x64

8

Sharing

General

Target

b637aab62951152ef53d4093b8aaa2fd366742c847d715a04e224af57ddb1613.exe
Size

203KB
Sample

250101-a11j6axqey
MD5

3256f6e4638e60bc4f526452e2471d10
SHA1

7af2d006cce501ad5f8fe7d69055f4af9bc0e0ec
SHA256

b637aab62951152ef53d4093b8aaa2fd366742c847d715a04e224af57ddb1613
SHA512

850b9b84683ae275070ddaee90b3ac117c2673ab74fd7ccac1b36550359b6ea09afd34eb1b4ecb9adb84c6615e4808a9a2d6bdc451df8ec56ce392ffbbfefca0
SSDEEP

3072:hJ8IMILmCa3yx6oFEdgVXnFYf7C9Ugfxm3Nep9viMRZ8VYx:0kmCaiEoFEd+FYOtxmdeviMRmVS

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

4 signatures

Behavioral task

behavioral1

Sample

b637aab62951152ef53d4093b8aaa2fd366742c847d715a04e224af57ddb1613.dll

Resource

win7-20240903-en

discovery persistence privilege_escalation upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

b637aab62951152ef53d4093b8aaa2fd366742c847d715a04e224af57ddb1613.dll

Resource

win10v2004-20241007-en

discovery persistence privilege_escalation upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  b637aab62951152ef53d4093b8aaa2fd366742c847d715a04e224af57ddb1613.exe
- Size
  
  203KB
- MD5
  
  3256f6e4638e60bc4f526452e2471d10
- SHA1
  
  7af2d006cce501ad5f8fe7d69055f4af9bc0e0ec
- SHA256
  
  b637aab62951152ef53d4093b8aaa2fd366742c847d715a04e224af57ddb1613
- SHA512
  
  850b9b84683ae275070ddaee90b3ac117c2673ab74fd7ccac1b36550359b6ea09afd34eb1b4ecb9adb84c6615e4808a9a2d6bdc451df8ec56ce392ffbbfefca0
- SSDEEP
  
  3072:hJ8IMILmCa3yx6oFEdgVXnFYf7C9Ugfxm3Nep9viMRZ8VYx:0kmCaiEoFEd+FYOtxmdeviMRmVS
Score

8^/10

discovery persistence privilege_escalation upx
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

discoverypersistenceprivilege_escalationupx

behavioral2

discoverypersistenceprivilege_escalationupx

© 2018-2025

Terms | Privacy