Overview

overview

10

Static

static

1

2025-01-08...id.exe

windows7-x64

10

2025-01-08...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-08_a16c89b8346acff4a16889ac477e6c14_floxif_hijackloader_icedid

  • Size

    3.2MB

  • Sample

    250108-ccj9da1khk

  • MD5

    a16c89b8346acff4a16889ac477e6c14

  • SHA1

    9b07a943a070dedf1555055125724e66f28f7adb

  • SHA256

    727b016a9a3be8e2238ad5b403e61b0b96ec36edf50b5cd0fadd2c9d1d9085bd

  • SHA512

    dd22e4fe8e750c8cb46e77d84890adf04499174396c0e6e475bdd695bf59a3cac5edfa58e6b06fe91b412756c23f1b51ea4e08f4d4083d29bf809aeb8f1acb61

  • SSDEEP

    49152:2KT5razB15YsBNMqxs9j7GvQDf536Ubmezbj2PSWMNAoenbtjNPBtpCW1zMD:2KMHXADyPSWMNAokPBtMW2D

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2025-01-08_a16c89b8346acff4a16889ac477e6c14_floxif_hijackloader_icedid

    • Size

      3.2MB

    • MD5

      a16c89b8346acff4a16889ac477e6c14

    • SHA1

      9b07a943a070dedf1555055125724e66f28f7adb

    • SHA256

      727b016a9a3be8e2238ad5b403e61b0b96ec36edf50b5cd0fadd2c9d1d9085bd

    • SHA512

      dd22e4fe8e750c8cb46e77d84890adf04499174396c0e6e475bdd695bf59a3cac5edfa58e6b06fe91b412756c23f1b51ea4e08f4d4083d29bf809aeb8f1acb61

    • SSDEEP

      49152:2KT5razB15YsBNMqxs9j7GvQDf536Ubmezbj2PSWMNAoenbtjNPBtpCW1zMD:2KMHXADyPSWMNAokPBtMW2D

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks