floxif | d559bbcc4b3043a262086cda9bc8b6c737efffaf8725ac7468639443f3a09fff | Triage

Submit
Reports

Overview

overview

Static

static

d559bbcc4b...fN.dll

windows7-x64

8

d559bbcc4b...fN.dll

windows10-2004-x64

5

Sharing

General

Target

d559bbcc4b3043a262086cda9bc8b6c737efffaf8725ac7468639443f3a09fffN.exe
Size

203KB
Sample

250104-tqpjpawrbx
MD5

d8110bf41e535227cb5d709f51b35310
SHA1

aac917405f30468551c9a47adb7ee666595f27bd
SHA256

d559bbcc4b3043a262086cda9bc8b6c737efffaf8725ac7468639443f3a09fff
SHA512

560c6ffab36331773f206f7d6a54fda8b8881f03e61b6e3bef85ca7636c9ce990df67d26d957a3450b83d7a4c887d5902e91fe7743434cd790191a42f4b90fc6
SSDEEP

3072:aJ8IMILmCa3yx6oFEdgVXnF6C9Ugfxm32n7SpiMP9G:5kmCaiEoFEd+F3txm2SpiMP9G

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

4 signatures

Behavioral task

behavioral1

Sample

d559bbcc4b3043a262086cda9bc8b6c737efffaf8725ac7468639443f3a09fffN.dll

Resource

win7-20240708-en

discovery persistence privilege_escalation upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

d559bbcc4b3043a262086cda9bc8b6c737efffaf8725ac7468639443f3a09fffN.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

5 signatures

120 seconds

Malware Config

Targets

- Target
  
  d559bbcc4b3043a262086cda9bc8b6c737efffaf8725ac7468639443f3a09fffN.exe
- Size
  
  203KB
- MD5
  
  d8110bf41e535227cb5d709f51b35310
- SHA1
  
  aac917405f30468551c9a47adb7ee666595f27bd
- SHA256
  
  d559bbcc4b3043a262086cda9bc8b6c737efffaf8725ac7468639443f3a09fff
- SHA512
  
  560c6ffab36331773f206f7d6a54fda8b8881f03e61b6e3bef85ca7636c9ce990df67d26d957a3450b83d7a4c887d5902e91fe7743434cd790191a42f4b90fc6
- SSDEEP
  
  3072:aJ8IMILmCa3yx6oFEdgVXnF6C9Ugfxm32n7SpiMP9G:5kmCaiEoFEd+F3txm2SpiMP9G
Score

8^/10

discovery persistence privilege_escalation upx
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

discoverypersistenceprivilege_escalationupx

behavioral2

© 2018-2025

Terms | Privacy