General

  • Target

    924eff69e3f9a9828f21ba6ee16c2be712e0dcc55febc154e42b4926864db798

  • Size

    278KB

  • Sample

    250101-pw2nzsxnbj

  • MD5

    92673830419e7dcf292f3583cebb032f

  • SHA1

    645ef3434e7e9773bce24c91883c8363b9568a9e

  • SHA256

    924eff69e3f9a9828f21ba6ee16c2be712e0dcc55febc154e42b4926864db798

  • SHA512

    87294a2fbeada705a703347e5f871c6d32abe8c489e94c24a6971f54a4b7c779fe4fe14d82ee798514516761c7fdc65b2b69cc575d32737d9e8f401b34651bc3

  • SSDEEP

    6144:1AWBfkTC3dM7B+mCHIBV+UdvrEFp7hKnF:1AWBfky6B+mCoBjvrEH72F

Malware Config

Targets

    • Target

      924eff69e3f9a9828f21ba6ee16c2be712e0dcc55febc154e42b4926864db798

    • Size

      278KB

    • MD5

      92673830419e7dcf292f3583cebb032f

    • SHA1

      645ef3434e7e9773bce24c91883c8363b9568a9e

    • SHA256

      924eff69e3f9a9828f21ba6ee16c2be712e0dcc55febc154e42b4926864db798

    • SHA512

      87294a2fbeada705a703347e5f871c6d32abe8c489e94c24a6971f54a4b7c779fe4fe14d82ee798514516761c7fdc65b2b69cc575d32737d9e8f401b34651bc3

    • SSDEEP

      6144:1AWBfkTC3dM7B+mCHIBV+UdvrEFp7hKnF:1AWBfky6B+mCoBjvrEH72F

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks