General

  • Target

    b6eed83152b8c85b238217293e484ee225ed336d17ef1c4d62b29c0b438bf78f

  • Size

    76KB

  • MD5

    afd84d86a83cc89b46dca7d79b900f16

  • SHA1

    219ab972af6ce8f6bb03c572f38ec1e8970c4795

  • SHA256

    b6eed83152b8c85b238217293e484ee225ed336d17ef1c4d62b29c0b438bf78f

  • SHA512

    4d2c872afa9631f911baf7b89b950e1f2a7dead5130e2fca2cd0407787f04a003e6ccfef72a624b5c3a29e7cc64e1651154c433bbf6e1f17a1520251480a0c9c

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z+X+26:c8y93KQjy7G55riF1cMo03b26

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b6eed83152b8c85b238217293e484ee225ed336d17ef1c4d62b29c0b438bf78f
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections