floxif | c0d055b639f435d1e4d4f053b077d0ab5a0928d7f0f9575d1410761ae14a1a5d | Triage

Submit
Reports

Overview

overview

Static

static

c0d055b639...5d.dll

windows7-x64

8

c0d055b639...5d.dll

windows10-2004-x64

5

Sharing

General

Target

c0d055b639f435d1e4d4f053b077d0ab5a0928d7f0f9575d1410761ae14a1a5d.exe
Size

76KB
Sample

250108-ak4xmsxmgr
MD5

e665a58d6fddbd757073240ffa7d38aa
SHA1

577670d1a00ee250e5dc0403047f7e8414931143
SHA256

c0d055b639f435d1e4d4f053b077d0ab5a0928d7f0f9575d1410761ae14a1a5d
SHA512

f37a6ef4375dc4c0ec5ce6d152a2ff6df3269578b1345e9e14ecf7b3d97dcad503d97907e23daa91dd9530171dd09eafa4944c3fc3fe3ac6a0f9e451a7c8ddfa
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zbo8gn:c8y93KQjy7G55riF1cMo03y8gn

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

c0d055b639f435d1e4d4f053b077d0ab5a0928d7f0f9575d1410761ae14a1a5d.dll

Resource

win7-20241010-en

discovery persistence privilege_escalation upx

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

c0d055b639f435d1e4d4f053b077d0ab5a0928d7f0f9575d1410761ae14a1a5d.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

5 signatures

120 seconds

Malware Config

Targets

- Target
  
  c0d055b639f435d1e4d4f053b077d0ab5a0928d7f0f9575d1410761ae14a1a5d.exe
- Size
  
  76KB
- MD5
  
  e665a58d6fddbd757073240ffa7d38aa
- SHA1
  
  577670d1a00ee250e5dc0403047f7e8414931143
- SHA256
  
  c0d055b639f435d1e4d4f053b077d0ab5a0928d7f0f9575d1410761ae14a1a5d
- SHA512
  
  f37a6ef4375dc4c0ec5ce6d152a2ff6df3269578b1345e9e14ecf7b3d97dcad503d97907e23daa91dd9530171dd09eafa4944c3fc3fe3ac6a0f9e451a7c8ddfa
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Zbo8gn:c8y93KQjy7G55riF1cMo03y8gn
Score

8^/10

discovery persistence privilege_escalation upx
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

discoverypersistenceprivilege_escalationupx

behavioral2

© 2018-2025

Terms | Privacy