General

  • Target

    JaffaCakes118_7b6b8f12128b24e67c5f9a6cdaaac470

  • Size

    313KB

  • Sample

    250104-ycbswswjeq

  • MD5

    7b6b8f12128b24e67c5f9a6cdaaac470

  • SHA1

    bac5ae4e85f3c1dfdd00d435c296073c025d4516

  • SHA256

    4a718e8332695f80c795d74c50ffc150bceda4dedd02b3a63cad4d07ec403db2

  • SHA512

    d78af636917baebef24d394bad2a7208e372509cdac382c3d96f504cfcaa37f6d0e77731a531a27803dfe1296b2ec54a3b32372f5425128f8a7a4fc86b03b1f5

  • SSDEEP

    6144:z1IbU/Zo9UiZcuLH0JGIZp6IQcAExQ6h1tlxq:ybURoiiZcukgInAE3xq

Malware Config

Targets

    • Target

      JaffaCakes118_7b6b8f12128b24e67c5f9a6cdaaac470

    • Size

      313KB

    • MD5

      7b6b8f12128b24e67c5f9a6cdaaac470

    • SHA1

      bac5ae4e85f3c1dfdd00d435c296073c025d4516

    • SHA256

      4a718e8332695f80c795d74c50ffc150bceda4dedd02b3a63cad4d07ec403db2

    • SHA512

      d78af636917baebef24d394bad2a7208e372509cdac382c3d96f504cfcaa37f6d0e77731a531a27803dfe1296b2ec54a3b32372f5425128f8a7a4fc86b03b1f5

    • SSDEEP

      6144:z1IbU/Zo9UiZcuLH0JGIZp6IQcAExQ6h1tlxq:ybURoiiZcukgInAE3xq

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks