floxif | dba4d53c6dddd665009363c1038a465ef5b922a8fe55977a9371e59117028d99 | Triage

Submit
Reports

Overview

overview

Static

static

dba4d53c6d...99.dll

windows7-x64

5

dba4d53c6d...99.dll

windows10-2004-x64

8

Sharing

General

Target

dba4d53c6dddd665009363c1038a465ef5b922a8fe55977a9371e59117028d99.exe
Size

76KB
Sample

250119-xsj9jasjgj
MD5

e452e71509892eaef83100e571cae717
SHA1

f2ec6d37fd8210e9c53b1f5dd4bbcc79a7a2547d
SHA256

dba4d53c6dddd665009363c1038a465ef5b922a8fe55977a9371e59117028d99
SHA512

958972ce9355c1b5f1fdafcc28d7bffcc353f1547a8b4ba90c0421aa7452a33cf561de7449369c0ea7d2f4bb1fa81aea4ae5fb380a8d80f2fba05902d40ec7f2
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z5jI:c8y93KQjy7G55riF1cMo03njI

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

dba4d53c6dddd665009363c1038a465ef5b922a8fe55977a9371e59117028d99.dll

Resource

win7-20241010-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

dba4d53c6dddd665009363c1038a465ef5b922a8fe55977a9371e59117028d99.dll

Resource

win10v2004-20241007-en

discovery persistence privilege_escalation upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  dba4d53c6dddd665009363c1038a465ef5b922a8fe55977a9371e59117028d99.exe
- Size
  
  76KB
- MD5
  
  e452e71509892eaef83100e571cae717
- SHA1
  
  f2ec6d37fd8210e9c53b1f5dd4bbcc79a7a2547d
- SHA256
  
  dba4d53c6dddd665009363c1038a465ef5b922a8fe55977a9371e59117028d99
- SHA512
  
  958972ce9355c1b5f1fdafcc28d7bffcc353f1547a8b4ba90c0421aa7452a33cf561de7449369c0ea7d2f4bb1fa81aea4ae5fb380a8d80f2fba05902d40ec7f2
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z5jI:c8y93KQjy7G55riF1cMo03njI
Score

8^/10

discovery upx persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

behavioral2

discoverypersistenceprivilege_escalationupx

© 2018-2025

Terms | Privacy