floxif | d9a70c03fdb57e3137d9324db51cace2de5240200f32664d826697b2e65e7103 | Triage

Submit
Reports

Overview

overview

Static

static

d9a70c03fd...03.dll

windows7-x64

5

d9a70c03fd...03.dll

windows10-2004-x64

8

Sharing

General

Target

d9a70c03fdb57e3137d9324db51cace2de5240200f32664d826697b2e65e7103.exe
Size

76KB
Sample

250102-msyf2sykaw
MD5

5fcafaae49a1b45425f7c96abd110a6b
SHA1

a02fc6badbd7814f2e3ee11fc054c10a7e30fde1
SHA256

d9a70c03fdb57e3137d9324db51cace2de5240200f32664d826697b2e65e7103
SHA512

47dfc0e170d642f005295ca085f1fe6cec397ee6f82b27f9099b575b3fe103e5b9b595fbfb3d9dcc9e39354f67624875b9520b5f59083096fe939dae46e3d3e4
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zrufsggq:c8y93KQjy7G55riF1cMo035ufsggq

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

d9a70c03fdb57e3137d9324db51cace2de5240200f32664d826697b2e65e7103.dll

Resource

win7-20240903-en

windows7-x64

5 signatures

120 seconds

Behavioral task

behavioral2

Sample

d9a70c03fdb57e3137d9324db51cace2de5240200f32664d826697b2e65e7103.dll

Resource

win10v2004-20241007-en

discovery persistence privilege_escalation upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  d9a70c03fdb57e3137d9324db51cace2de5240200f32664d826697b2e65e7103.exe
- Size
  
  76KB
- MD5
  
  5fcafaae49a1b45425f7c96abd110a6b
- SHA1
  
  a02fc6badbd7814f2e3ee11fc054c10a7e30fde1
- SHA256
  
  d9a70c03fdb57e3137d9324db51cace2de5240200f32664d826697b2e65e7103
- SHA512
  
  47dfc0e170d642f005295ca085f1fe6cec397ee6f82b27f9099b575b3fe103e5b9b595fbfb3d9dcc9e39354f67624875b9520b5f59083096fe939dae46e3d3e4
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zrufsggq:c8y93KQjy7G55riF1cMo035ufsggq
Score

8^/10

discovery upx persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

behavioral2

discoverypersistenceprivilege_escalationupx

© 2018-2025

Terms | Privacy