General

  • Target

    73a43d6486e0cf221353e0e7186a1a0c6b8ff4168d51540a2eb0ea4f7c6c4a23N.exe

  • Size

    244KB

  • Sample

    250101-xxjhssyqgs

  • MD5

    e498d06a07de6b39a8c0a0615ee59ac0

  • SHA1

    649712cde9d1971019b626b065ceba860b8cec8b

  • SHA256

    73a43d6486e0cf221353e0e7186a1a0c6b8ff4168d51540a2eb0ea4f7c6c4a23

  • SHA512

    afd393d447df47fc0761e1f5e6de2f278886e1775b91f79400c5979d71a6ebddd03b8ee9afa7de2031d0d833baa03b29a2805321beca6e420109f6050e11e37b

  • SSDEEP

    6144:3xsBCdxkQkkdY86fiCOZj3qj+BV+UdvrEFp7hKmd:Hojx857K+BjvrEH7V

Malware Config

Targets

    • Target

      73a43d6486e0cf221353e0e7186a1a0c6b8ff4168d51540a2eb0ea4f7c6c4a23N.exe

    • Size

      244KB

    • MD5

      e498d06a07de6b39a8c0a0615ee59ac0

    • SHA1

      649712cde9d1971019b626b065ceba860b8cec8b

    • SHA256

      73a43d6486e0cf221353e0e7186a1a0c6b8ff4168d51540a2eb0ea4f7c6c4a23

    • SHA512

      afd393d447df47fc0761e1f5e6de2f278886e1775b91f79400c5979d71a6ebddd03b8ee9afa7de2031d0d833baa03b29a2805321beca6e420109f6050e11e37b

    • SSDEEP

      6144:3xsBCdxkQkkdY86fiCOZj3qj+BV+UdvrEFp7hKmd:Hojx857K+BjvrEH7V

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks