General

  • Target

    6669375a743ce10b7b185c612ba1adc63ff0c6e817075bed454ed6253ececd31

  • Size

    241KB

  • Sample

    250103-gc583a1pcw

  • MD5

    1e99320573970da9a2c832442d42cc12

  • SHA1

    804070bf6ac472b358d8551b7cdb63b38dcda5a8

  • SHA256

    6669375a743ce10b7b185c612ba1adc63ff0c6e817075bed454ed6253ececd31

  • SHA512

    cf028bdc7c5ae84c66e5329e8021c77af12b57781d5c4941f58986a2dc8ff58e0e40fb9f8789a7bbaa04ad3a1acebf9330a10db32df4acf16b65aeaa30bf979c

  • SSDEEP

    6144:Kdu/aK2h9H/B+rwNBV+UdvrEFp7hKTStv:Kdu/aK2vB+kNBjvrEH7+K

Malware Config

Targets

    • Target

      6669375a743ce10b7b185c612ba1adc63ff0c6e817075bed454ed6253ececd31

    • Size

      241KB

    • MD5

      1e99320573970da9a2c832442d42cc12

    • SHA1

      804070bf6ac472b358d8551b7cdb63b38dcda5a8

    • SHA256

      6669375a743ce10b7b185c612ba1adc63ff0c6e817075bed454ed6253ececd31

    • SHA512

      cf028bdc7c5ae84c66e5329e8021c77af12b57781d5c4941f58986a2dc8ff58e0e40fb9f8789a7bbaa04ad3a1acebf9330a10db32df4acf16b65aeaa30bf979c

    • SSDEEP

      6144:Kdu/aK2h9H/B+rwNBV+UdvrEFp7hKTStv:Kdu/aK2vB+kNBjvrEH7+K

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks