General

  • Target

    JaffaCakes118_5dc2ff78d8091bce9adc84586c94695f

  • Size

    355KB

  • Sample

    250101-vvg6vaxkaj

  • MD5

    5dc2ff78d8091bce9adc84586c94695f

  • SHA1

    02b393f811c55f142af61f54e1f1a885102da6ea

  • SHA256

    ad2d0056f7359e8afc0cf6c9d8e18412047e6e01e0dc101ca9e95f1b855d9030

  • SHA512

    e53da6e76c7e04ba1804b3f4539ca3faaf7a8863ed93a88858cfe5e6d0e06af21aca5e3ff59acebdf1431e9f2208f4da9ec704fc44e9bdbef5e6caa00580c456

  • SSDEEP

    6144:dr4xZSeUXTB6GWIU3XYOGsBvnHuUAv+qdbC8SZFN:dr4xZSeUV6GWdn9R6b2

Malware Config

Targets

    • Target

      JaffaCakes118_5dc2ff78d8091bce9adc84586c94695f

    • Size

      355KB

    • MD5

      5dc2ff78d8091bce9adc84586c94695f

    • SHA1

      02b393f811c55f142af61f54e1f1a885102da6ea

    • SHA256

      ad2d0056f7359e8afc0cf6c9d8e18412047e6e01e0dc101ca9e95f1b855d9030

    • SHA512

      e53da6e76c7e04ba1804b3f4539ca3faaf7a8863ed93a88858cfe5e6d0e06af21aca5e3ff59acebdf1431e9f2208f4da9ec704fc44e9bdbef5e6caa00580c456

    • SSDEEP

      6144:dr4xZSeUXTB6GWIU3XYOGsBvnHuUAv+qdbC8SZFN:dr4xZSeUV6GWdn9R6b2

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks