Overview

overview

10

Static

static

1

2025-01-11...fo.exe

windows7-x64

10

2025-01-11...fo.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-11_705a7ac2de8e08522eadf85baf6a6f7e_bkransomware_floxif_metamorfo

  • Size

    3.1MB

  • Sample

    250111-b2n37azmeq

  • MD5

    705a7ac2de8e08522eadf85baf6a6f7e

  • SHA1

    f4a80e64d07be34c6d0de5eadd40b14e4ecfc577

  • SHA256

    322247ad74cfe37a0897b4ec26bb16afb1bf37e7da205e2abe7fa7fdab66ba66

  • SHA512

    99218ad157648230a00c8e51433aa7ba53e5bbf0d4350f7aee768706e8312f5718534b08282c70df32168e4df3398d8faaeed69877fdb9aaa532e2c511b7d046

  • SSDEEP

    98304:G9FeJwLB+bYc8a8Xq/fTxz03WLXKucaTljjJdC:Gxvmxz03WLXKucaTljjJo

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2025-01-11_705a7ac2de8e08522eadf85baf6a6f7e_bkransomware_floxif_metamorfo

    • Size

      3.1MB

    • MD5

      705a7ac2de8e08522eadf85baf6a6f7e

    • SHA1

      f4a80e64d07be34c6d0de5eadd40b14e4ecfc577

    • SHA256

      322247ad74cfe37a0897b4ec26bb16afb1bf37e7da205e2abe7fa7fdab66ba66

    • SHA512

      99218ad157648230a00c8e51433aa7ba53e5bbf0d4350f7aee768706e8312f5718534b08282c70df32168e4df3398d8faaeed69877fdb9aaa532e2c511b7d046

    • SSDEEP

      98304:G9FeJwLB+bYc8a8Xq/fTxz03WLXKucaTljjJdC:Gxvmxz03WLXKucaTljjJo

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks