General

  • Target

    d0c1352e1f9790980a572dfaef49ec158fe8450cfde0b8ede640b02b8816b17a

  • Size

    277KB

  • Sample

    250101-hkr7vazphn

  • MD5

    6020c0997823d3fcf5bb49a57a71a50e

  • SHA1

    2693a6f80fe1bad6d98d06199a17f8a5d2b506a2

  • SHA256

    d0c1352e1f9790980a572dfaef49ec158fe8450cfde0b8ede640b02b8816b17a

  • SHA512

    5b1bc73d9f43a36a442ab2362cf330fb8d482809c7002ff0e7d5523a03f9df45a4e7a6b5d976757cfecc8b7811914f3ce715c2646e9cebd4f2701a3007ee8bc0

  • SSDEEP

    6144:OrRl/DFf3RANs7B+mC2BV+UdvrEFp7hKn:OrRlbFf3RANaB+mC2BjvrEH7A

Malware Config

Targets

    • Target

      d0c1352e1f9790980a572dfaef49ec158fe8450cfde0b8ede640b02b8816b17a

    • Size

      277KB

    • MD5

      6020c0997823d3fcf5bb49a57a71a50e

    • SHA1

      2693a6f80fe1bad6d98d06199a17f8a5d2b506a2

    • SHA256

      d0c1352e1f9790980a572dfaef49ec158fe8450cfde0b8ede640b02b8816b17a

    • SHA512

      5b1bc73d9f43a36a442ab2362cf330fb8d482809c7002ff0e7d5523a03f9df45a4e7a6b5d976757cfecc8b7811914f3ce715c2646e9cebd4f2701a3007ee8bc0

    • SSDEEP

      6144:OrRl/DFf3RANs7B+mC2BV+UdvrEFp7hKn:OrRlbFf3RANaB+mC2BjvrEH7A

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks