Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2025-01-26_df81ff95baf450f51910524927e4e3da_floxif_mafia
-
Size
1.7MB
-
Sample
250126-b3a8qayqar
-
MD5
df81ff95baf450f51910524927e4e3da
-
SHA1
4396962bd0a99adfd38af6290a0b37497fe82959
-
SHA256
0e0ac11ba5fe37c2dad8eefa003cc36b4185d78ecf362dfb9d3316bdf4a711b9
-
SHA512
e877a404cf3f38f6c0e0745effb07dfe24326dc63d3a69eaf0dd50e8352b4e53c03b5ac5a95c3f2550009f9d1d21d6d380a15b10cfcc714fff0fed1e58f8f073
-
SSDEEP
49152:QOXCLdckT5HUTDCjgsjuQtIfr0pRAxGKoCl74GVxuOVwkRjcpfWaA3x:VFkT5H4C8sjuQtIfr0p6YKV74GVxPjca
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-26_df81ff95baf450f51910524927e4e3da_floxif_mafia.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-26_df81ff95baf450f51910524927e4e3da_floxif_mafia.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2025-01-26_df81ff95baf450f51910524927e4e3da_floxif_mafia
-
Size
1.7MB
-
MD5
df81ff95baf450f51910524927e4e3da
-
SHA1
4396962bd0a99adfd38af6290a0b37497fe82959
-
SHA256
0e0ac11ba5fe37c2dad8eefa003cc36b4185d78ecf362dfb9d3316bdf4a711b9
-
SHA512
e877a404cf3f38f6c0e0745effb07dfe24326dc63d3a69eaf0dd50e8352b4e53c03b5ac5a95c3f2550009f9d1d21d6d380a15b10cfcc714fff0fed1e58f8f073
-
SSDEEP
49152:QOXCLdckT5HUTDCjgsjuQtIfr0pRAxGKoCl74GVxuOVwkRjcpfWaA3x:VFkT5H4C8sjuQtIfr0p6YKV74GVxPjca
-
Floxif family
-
Detects Floxif payload
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Modifies Windows Firewall
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
2AppInit DLLs
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
2AppInit DLLs
1Netsh Helper DLL
1