General

  • Target

    827e360a551b632582d56b5492cf20953a94010b614da44819c947ee98000ee9

  • Size

    278KB

  • Sample

    250105-hqnrlsylar

  • MD5

    2c1372283b6c42f2eb655ec041374617

  • SHA1

    4a2c60670d6ca8490db86449a3946e05e3ab5ad8

  • SHA256

    827e360a551b632582d56b5492cf20953a94010b614da44819c947ee98000ee9

  • SHA512

    6daa722d94cbb04d499bf12e0d57be0ec14d5832982b4acb217b80c26815f1e931687a4f379c8137587257211765a59d83415fbda70cb2229d83ad070ccf0928

  • SSDEEP

    6144:XAXl/DRfkRFC3dM7B+mCcBV+UdvrEFp7hKtg:XAXlbRfkR86B+mCcBjvrEH7Cg

Malware Config

Targets

    • Target

      827e360a551b632582d56b5492cf20953a94010b614da44819c947ee98000ee9

    • Size

      278KB

    • MD5

      2c1372283b6c42f2eb655ec041374617

    • SHA1

      4a2c60670d6ca8490db86449a3946e05e3ab5ad8

    • SHA256

      827e360a551b632582d56b5492cf20953a94010b614da44819c947ee98000ee9

    • SHA512

      6daa722d94cbb04d499bf12e0d57be0ec14d5832982b4acb217b80c26815f1e931687a4f379c8137587257211765a59d83415fbda70cb2229d83ad070ccf0928

    • SSDEEP

      6144:XAXl/DRfkRFC3dM7B+mCcBV+UdvrEFp7hKtg:XAXlbRfkR86B+mCcBjvrEH7Cg

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks