Overview

overview

10

Static

static

1

198d8757e1...11.dll

windows7-x64

10

198d8757e1...11.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    198d8757e1d9288b597f9b2f12d75f7c3bf703055c684d08a499e222516a6511

  • Size

    183KB

  • Sample

    250125-y2xrnazrbq

  • MD5

    b61bd181a51ede5958e78ea2a37a9b1c

  • SHA1

    7a4f9fb722ac89b57b7215a72a50a3bb26541be3

  • SHA256

    198d8757e1d9288b597f9b2f12d75f7c3bf703055c684d08a499e222516a6511

  • SHA512

    d4b2099ed022177749650de9bd45fefed88487c742a4750de5f1c5c3f8e3d6117e425a54e24847b76a6799f2e4a8b9bfa7e8338778797734ca7ea157c55c71b1

  • SSDEEP

    3072:6G1eI8tNqL7+LbNQDCVyymQXH5SjjJ2lQBV+UdE+rECWp7hKXOn:6GsltA2YyXX5SNBV+UdvrEFp7hKXOn

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      198d8757e1d9288b597f9b2f12d75f7c3bf703055c684d08a499e222516a6511

    • Size

      183KB

    • MD5

      b61bd181a51ede5958e78ea2a37a9b1c

    • SHA1

      7a4f9fb722ac89b57b7215a72a50a3bb26541be3

    • SHA256

      198d8757e1d9288b597f9b2f12d75f7c3bf703055c684d08a499e222516a6511

    • SHA512

      d4b2099ed022177749650de9bd45fefed88487c742a4750de5f1c5c3f8e3d6117e425a54e24847b76a6799f2e4a8b9bfa7e8338778797734ca7ea157c55c71b1

    • SSDEEP

      3072:6G1eI8tNqL7+LbNQDCVyymQXH5SjjJ2lQBV+UdE+rECWp7hKXOn:6GsltA2YyXX5SNBV+UdvrEFp7hKXOn

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • Blocklisted process makes network request

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks