floxif | 581b7414bf4cc46bcac2ccdda2ea283976697c5844ce346a606e9c49629a4ba9 | Triage

Submit
Reports

Overview

overview

Static

static

581b7414bf...9N.dll

windows7-x64

8

581b7414bf...9N.dll

windows10-2004-x64

5

Sharing

General

Target

581b7414bf4cc46bcac2ccdda2ea283976697c5844ce346a606e9c49629a4ba9N.exe
Size

76KB
Sample

250104-ld6y7stkdw
MD5

8e7fc8e5c1b7e1605aba13182dc8d9d0
SHA1

1e65b7df3f3d80177f9a965a9e15764076ced0e2
SHA256

581b7414bf4cc46bcac2ccdda2ea283976697c5844ce346a606e9c49629a4ba9
SHA512

afe681c3fe9f4738ee003fda04188298bea9048cf24e3654ccb95d68263ac446b992e4e57c82c23efac56d43700d98419d932d79d7f3163c2f3334f789d77ffc
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z8Q1knGae:c8y93KQjy7G55riF1cMo03e1n4

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

581b7414bf4cc46bcac2ccdda2ea283976697c5844ce346a606e9c49629a4ba9N.dll

Resource

win7-20241010-en

discovery persistence privilege_escalation upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

581b7414bf4cc46bcac2ccdda2ea283976697c5844ce346a606e9c49629a4ba9N.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

5 signatures

120 seconds

Malware Config

Targets

- Target
  
  581b7414bf4cc46bcac2ccdda2ea283976697c5844ce346a606e9c49629a4ba9N.exe
- Size
  
  76KB
- MD5
  
  8e7fc8e5c1b7e1605aba13182dc8d9d0
- SHA1
  
  1e65b7df3f3d80177f9a965a9e15764076ced0e2
- SHA256
  
  581b7414bf4cc46bcac2ccdda2ea283976697c5844ce346a606e9c49629a4ba9
- SHA512
  
  afe681c3fe9f4738ee003fda04188298bea9048cf24e3654ccb95d68263ac446b992e4e57c82c23efac56d43700d98419d932d79d7f3163c2f3334f789d77ffc
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z8Q1knGae:c8y93KQjy7G55riF1cMo03e1n4
Score

8^/10

discovery persistence privilege_escalation upx
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

discoverypersistenceprivilege_escalationupx

behavioral2

© 2018-2025

Terms | Privacy