floxif | 591466a18e8364f9dbc62f2d41ba43bb024e1fa24b1da68e01306f09fe749b8a | Triage

Submit
Reports

Overview

overview

Static

static

591466a18e...8a.dll

windows7-x64

5

591466a18e...8a.dll

windows10-2004-x64

8

Sharing

General

Target

591466a18e8364f9dbc62f2d41ba43bb024e1fa24b1da68e01306f09fe749b8a.exe
Size

76KB
Sample

250123-29357axrht
MD5

d81b189753860fde6ba20d5fddaca044
SHA1

a2d7bd33d1006e98e71d7c137b24f05f6cca98e1
SHA256

591466a18e8364f9dbc62f2d41ba43bb024e1fa24b1da68e01306f09fe749b8a
SHA512

57b5981bb50077e68207cf1512ac0db50f9d53f6122faf9a3fe601a670ffde695683eea1d408f82b3e240840d3f43791d6ad57626d0d3738936845584fe90a76
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZCTpR:c8y93KQjy7G55riF1cMo03CR

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

591466a18e8364f9dbc62f2d41ba43bb024e1fa24b1da68e01306f09fe749b8a.dll

Resource

win7-20240903-en

windows7-x64

5 signatures

120 seconds

Behavioral task

behavioral2

Sample

591466a18e8364f9dbc62f2d41ba43bb024e1fa24b1da68e01306f09fe749b8a.dll

Resource

win10v2004-20241007-en

discovery persistence privilege_escalation upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  591466a18e8364f9dbc62f2d41ba43bb024e1fa24b1da68e01306f09fe749b8a.exe
- Size
  
  76KB
- MD5
  
  d81b189753860fde6ba20d5fddaca044
- SHA1
  
  a2d7bd33d1006e98e71d7c137b24f05f6cca98e1
- SHA256
  
  591466a18e8364f9dbc62f2d41ba43bb024e1fa24b1da68e01306f09fe749b8a
- SHA512
  
  57b5981bb50077e68207cf1512ac0db50f9d53f6122faf9a3fe601a670ffde695683eea1d408f82b3e240840d3f43791d6ad57626d0d3738936845584fe90a76
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZCTpR:c8y93KQjy7G55riF1cMo03CR
Score

8^/10

discovery upx persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

behavioral2

discoverypersistenceprivilege_escalationupx

© 2018-2025

Terms | Privacy