General

  • Target

    d2c2fcfb80a060f0788e9f7b4da72cfff4ec6c37a492e4b8aae2c7d3ca7663c3

  • Size

    76KB

  • MD5

    333444328f123b93f2c1fad9b4300951

  • SHA1

    0081f00d7f7987dfb5a5cbc51656ccd879ccef49

  • SHA256

    d2c2fcfb80a060f0788e9f7b4da72cfff4ec6c37a492e4b8aae2c7d3ca7663c3

  • SHA512

    8e9cc7c348f520526570718da9f9f646e71ff6116125b5303a3da3020d3fec60d7263dab5c7fad3f2d112a068e402d60646d8fe459dae925d694e5fb8bf122d8

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZT2vvvxAUw1:c8y93KQjy7G55riF1cMo03l2vnxAUw1

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d2c2fcfb80a060f0788e9f7b4da72cfff4ec6c37a492e4b8aae2c7d3ca7663c3
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections