floxif | 84663b033f080f808d3c3ab68d9fdf5a2d109b8c713c824b1ee5af4d7ca06b5b | Triage

Submit
Reports

Overview

overview

Static

static

84663b033f...bN.dll

windows7-x64

8

84663b033f...bN.dll

windows10-2004-x64

5

Sharing

General

Target

84663b033f080f808d3c3ab68d9fdf5a2d109b8c713c824b1ee5af4d7ca06b5bN.exe
Size

76KB
Sample

250104-rwjjhstkey
MD5

9be962a410d4fe0e2a5b62abc54513d0
SHA1

cd0abe1bee3aff38ec56292ed666a297daf327bc
SHA256

84663b033f080f808d3c3ab68d9fdf5a2d109b8c713c824b1ee5af4d7ca06b5b
SHA512

a36901fe6f29905cc804f435f084d75601f670beb126fc734079915236921e14982dbb2b768e4d97caccdfc16487b08ba0f66a6c3cc7f762586e4e38e32d3463
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZPYdt90Z:c8y93KQjy7G55riF1cMo03Ct90Z

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

84663b033f080f808d3c3ab68d9fdf5a2d109b8c713c824b1ee5af4d7ca06b5bN.dll

Resource

win7-20241010-en

discovery persistence privilege_escalation upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

84663b033f080f808d3c3ab68d9fdf5a2d109b8c713c824b1ee5af4d7ca06b5bN.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

5 signatures

120 seconds

Malware Config

Targets

- Target
  
  84663b033f080f808d3c3ab68d9fdf5a2d109b8c713c824b1ee5af4d7ca06b5bN.exe
- Size
  
  76KB
- MD5
  
  9be962a410d4fe0e2a5b62abc54513d0
- SHA1
  
  cd0abe1bee3aff38ec56292ed666a297daf327bc
- SHA256
  
  84663b033f080f808d3c3ab68d9fdf5a2d109b8c713c824b1ee5af4d7ca06b5b
- SHA512
  
  a36901fe6f29905cc804f435f084d75601f670beb126fc734079915236921e14982dbb2b768e4d97caccdfc16487b08ba0f66a6c3cc7f762586e4e38e32d3463
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZPYdt90Z:c8y93KQjy7G55riF1cMo03Ct90Z
Score

8^/10

discovery persistence privilege_escalation upx
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

discoverypersistenceprivilege_escalationupx

behavioral2

© 2018-2025

Terms | Privacy