General

  • Target

    b268c437e280f2fabdce072ca9aba6e24fd77280423ff0efde58a3346c92aa4c

  • Size

    277KB

  • Sample

    250111-lhkxjavlhx

  • MD5

    a192d568e0f75822e604582252cac5a4

  • SHA1

    00fa488954f4bb58aec4f82566d3c4afc002b96c

  • SHA256

    b268c437e280f2fabdce072ca9aba6e24fd77280423ff0efde58a3346c92aa4c

  • SHA512

    a5b3065db3c80e0051f8bd7ab05019d44005634882c20eaa27292bba39153bdea18cbbcd83fff7cf34bc42977ecbeb47abfb745bc8586b456370d16a33e8f69a

  • SSDEEP

    6144:dGl/DRfkTC3dM7B+mCivBV+UdvrEFp7hKO3:dGlbRfky6B+mCABjvrEH7j

Malware Config

Targets

    • Target

      b268c437e280f2fabdce072ca9aba6e24fd77280423ff0efde58a3346c92aa4c

    • Size

      277KB

    • MD5

      a192d568e0f75822e604582252cac5a4

    • SHA1

      00fa488954f4bb58aec4f82566d3c4afc002b96c

    • SHA256

      b268c437e280f2fabdce072ca9aba6e24fd77280423ff0efde58a3346c92aa4c

    • SHA512

      a5b3065db3c80e0051f8bd7ab05019d44005634882c20eaa27292bba39153bdea18cbbcd83fff7cf34bc42977ecbeb47abfb745bc8586b456370d16a33e8f69a

    • SSDEEP

      6144:dGl/DRfkTC3dM7B+mCivBV+UdvrEFp7hKO3:dGlbRfky6B+mCABjvrEH7j

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks