General

  • Target

    714bd0c0c2a21320de7acb700bc1d52f3fe2a867b1d9da3fc693dd6840c1b9e2N.exe

  • Size

    277KB

  • Sample

    250125-fpkmfsymfl

  • MD5

    ac4d7a5c76dbb3dd8e264154d5e0d620

  • SHA1

    f52437049cd6a45959af4f828403e0a0498ce5a5

  • SHA256

    714bd0c0c2a21320de7acb700bc1d52f3fe2a867b1d9da3fc693dd6840c1b9e2

  • SHA512

    f1cc461f8bfe5b1638a8cfda0c2f4556ea9c6333bd2c74d9e045c1a55350d33bd68ec3663d4fc36618a573507e20c714d7d80985915786fed1e2c4ff7f5db30a

  • SSDEEP

    6144:cSAGl/DRfkTC3dM7B+mCGBV+UdvrEFp7hKe:cSAGlbRfky6B+mCGBjvrEH71

Malware Config

Targets

    • Target

      714bd0c0c2a21320de7acb700bc1d52f3fe2a867b1d9da3fc693dd6840c1b9e2N.exe

    • Size

      277KB

    • MD5

      ac4d7a5c76dbb3dd8e264154d5e0d620

    • SHA1

      f52437049cd6a45959af4f828403e0a0498ce5a5

    • SHA256

      714bd0c0c2a21320de7acb700bc1d52f3fe2a867b1d9da3fc693dd6840c1b9e2

    • SHA512

      f1cc461f8bfe5b1638a8cfda0c2f4556ea9c6333bd2c74d9e045c1a55350d33bd68ec3663d4fc36618a573507e20c714d7d80985915786fed1e2c4ff7f5db30a

    • SSDEEP

      6144:cSAGl/DRfkTC3dM7B+mCGBV+UdvrEFp7hKe:cSAGlbRfky6B+mCGBjvrEH71

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks