floxif | d176f1e2ca5158ed80a4505c94a259e2778591f075ba53cb02a2c8aa881511ad | Triage

Submit
Reports

Overview

overview

Static

static

d176f1e2ca...ad.dll

windows7-x64

5

d176f1e2ca...ad.dll

windows10-2004-x64

8

Sharing

General

Target

d176f1e2ca5158ed80a4505c94a259e2778591f075ba53cb02a2c8aa881511ad.exe
Size

76KB
Sample

250124-2r6hlaspbx
MD5

30be3eb54246fa664d36b9e1f7c455d4
SHA1

8b66e7f2d0a6686131030e01aef5bd75d336795a
SHA256

d176f1e2ca5158ed80a4505c94a259e2778591f075ba53cb02a2c8aa881511ad
SHA512

54414130789d16276bb2db7ce24122a1979cdc6412fddd08fa45485d59f3cfed6955028c5bf673b3549a8cb794c6ab41a9f13dd52b40ab73f7b8802d1ae84916
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z/v5Ws9JM8:c8y93KQjy7G55riF1cMo03tvpLM8

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

d176f1e2ca5158ed80a4505c94a259e2778591f075ba53cb02a2c8aa881511ad.dll

Resource

win7-20241023-en

windows7-x64

5 signatures

120 seconds

Behavioral task

behavioral2

Sample

d176f1e2ca5158ed80a4505c94a259e2778591f075ba53cb02a2c8aa881511ad.dll

Resource

win10v2004-20241007-en

discovery persistence privilege_escalation upx

windows10-2004-x64

6 signatures

120 seconds

Malware Config

Targets

- Target
  
  d176f1e2ca5158ed80a4505c94a259e2778591f075ba53cb02a2c8aa881511ad.exe
- Size
  
  76KB
- MD5
  
  30be3eb54246fa664d36b9e1f7c455d4
- SHA1
  
  8b66e7f2d0a6686131030e01aef5bd75d336795a
- SHA256
  
  d176f1e2ca5158ed80a4505c94a259e2778591f075ba53cb02a2c8aa881511ad
- SHA512
  
  54414130789d16276bb2db7ce24122a1979cdc6412fddd08fa45485d59f3cfed6955028c5bf673b3549a8cb794c6ab41a9f13dd52b40ab73f7b8802d1ae84916
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z/v5Ws9JM8:c8y93KQjy7G55riF1cMo03tvpLM8
Score

8^/10

discovery upx persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

behavioral2

discoverypersistenceprivilege_escalationupx

© 2018-2025

Terms | Privacy