floxif | d2c2e9ca44eccbb48ad338de0343d94c3e53701d9d78d9fe784fb2dd238d1216 | Triage

Submit
Reports

Overview

overview

Static

static

1

d2c2e9ca44...16.exe

windows7-x64

d2c2e9ca44...16.exe

windows10-2004-x64

Sharing

General

Target

d2c2e9ca44eccbb48ad338de0343d94c3e53701d9d78d9fe784fb2dd238d1216
Size

287KB
Sample

250106-jkp8xszrgy
MD5

3989a3cc864ee569fa0dec1966694985
SHA1

89edc81816f3136b432e1b9ee68ead7495c8c5c1
SHA256

d2c2e9ca44eccbb48ad338de0343d94c3e53701d9d78d9fe784fb2dd238d1216
SHA512

4ab3361dfe4dd0e66275fb9f09a036e23b49354a3ceb718d128c4b04310e462fbdfca77a49080ec89dde7d7a5a3093e56ac049255c08c4a16afbcf09b58a7fb6
SSDEEP

6144:SzTuN9afTJeQuyXTZBB+R8WpMBV+UdvrEFp7hK5:SzTuN9abJeQuyXTvB+R8WiBjvrEH7e

Score

10^/10

floxif backdoor discovery trojan upx

Static task

static1

Behavioral task

behavioral1

Sample

d2c2e9ca44eccbb48ad338de0343d94c3e53701d9d78d9fe784fb2dd238d1216.exe

Resource

win7-20240903-en

floxif backdoor discovery trojan upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

d2c2e9ca44eccbb48ad338de0343d94c3e53701d9d78d9fe784fb2dd238d1216.exe

Resource

win10v2004-20241007-en

floxif backdoor discovery trojan upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  d2c2e9ca44eccbb48ad338de0343d94c3e53701d9d78d9fe784fb2dd238d1216
- Size
  
  287KB
- MD5
  
  3989a3cc864ee569fa0dec1966694985
- SHA1
  
  89edc81816f3136b432e1b9ee68ead7495c8c5c1
- SHA256
  
  d2c2e9ca44eccbb48ad338de0343d94c3e53701d9d78d9fe784fb2dd238d1216
- SHA512
  
  4ab3361dfe4dd0e66275fb9f09a036e23b49354a3ceb718d128c4b04310e462fbdfca77a49080ec89dde7d7a5a3093e56ac049255c08c4a16afbcf09b58a7fb6
- SSDEEP
  
  6144:SzTuN9afTJeQuyXTZBB+R8WpMBV+UdvrEFp7hK5:SzTuN9abJeQuyXTvB+R8WiBjvrEH7e
Score

10^/10

floxif backdoor discovery trojan upx
- Floxif family
  floxif
- Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

floxifbackdoordiscoverytrojanupx

behavioral2

floxifbackdoordiscoverytrojanupx

© 2018-2025

Terms | Privacy