floxif | a066e7abeb2dc5ff77541b7159abb041248dfc4a7c44d8f1abebcb25f9e99a02

General

Target

a066e7abeb2dc5ff77541b7159abb041248dfc4a7c44d8f1abebcb25f9e99a02N.exe
Size

119KB
Sample

250101-qacy6svqcw
MD5

ee4b1ad451ef5ca46514975d289cd440
SHA1

a147753e866f239079c29ee8a1b81d8bd0ac1fff
SHA256

a066e7abeb2dc5ff77541b7159abb041248dfc4a7c44d8f1abebcb25f9e99a02
SHA512

3fd3f222e3fed7eae6ee24f5bb45d6d8693bd7ff2d74bc404f0413f1916cca864e60c27a7a5ef5352bc139bac4ffc1eaf4272da7153d54551118d7681dc5c01e
SSDEEP

3072:FZ6eNDI2kJJH2lQBV+UdE+rECWp7hK2awJEzM:FNdwrBV+UdvrEFp7hK2fYM

Score

10^/10

Malware Config

Targets

- Target
  
  a066e7abeb2dc5ff77541b7159abb041248dfc4a7c44d8f1abebcb25f9e99a02N.exe
- Size
  
  119KB
- MD5
  
  ee4b1ad451ef5ca46514975d289cd440
- SHA1
  
  a147753e866f239079c29ee8a1b81d8bd0ac1fff
- SHA256
  
  a066e7abeb2dc5ff77541b7159abb041248dfc4a7c44d8f1abebcb25f9e99a02
- SHA512
  
  3fd3f222e3fed7eae6ee24f5bb45d6d8693bd7ff2d74bc404f0413f1916cca864e60c27a7a5ef5352bc139bac4ffc1eaf4272da7153d54551118d7681dc5c01e
- SSDEEP
  
  3072:FZ6eNDI2kJJH2lQBV+UdE+rECWp7hK2awJEzM:FNdwrBV+UdvrEFp7hK2fYM
Score

10^/10

floxif backdoor discovery trojan upx persistence privilege_escalation
- Floxif family
  floxif
- Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/Registry.dll
- Size
  
  15KB
- MD5
  
  47ea728b71d68fdfaf763b8b7755a5e8
- SHA1
  
  205ac06efa58bd05533e19e8452e737758f1a2d2
- SHA256
  
  99e50768696110480e83e71379d1e4507a860a5dba03bb80130878e1d98129f7
- SHA512
  
  8a0c69dcd5dc205d099045a16af5e81ad8984a1c21ea9402165adba7dd135d952da5b0846f2b9c156065d4d8aaaa54ab503d22f1d880db406a5a7952a8e7fa36
- SSDEEP
  
  384:fl5yvnYUP9yyk8xJE8m7bq5QYUoa1Yx1Vibwpb:fLyvYw9uDZC5vwo1swt
Score

3^/10

discovery
behavioral3 behavioral4