Overview

overview

10

Static

static

1

2025-01-27...ia.exe

windows7-x64

10

2025-01-27...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-27_5d57aef478829916d336b97167716e26_floxif_mafia

  • Size

    347KB

  • Sample

    250127-h7z6zaxmgs

  • MD5

    5d57aef478829916d336b97167716e26

  • SHA1

    18e7a83e0ab9bcde6d1238784c04de98f88aa93f

  • SHA256

    ef584e44f30ccb49441ef3e6df7896f4fa89fde0cd6d97aaefa07dfe5b476ad6

  • SHA512

    a865a4a449946282179545b6a74057b04efbc74c46750d7f2b86e7e25a440e16f8688dda9789f080053e57cb7a7c54198ade67b277fbf5c5ad7a4c2e45f87209

  • SSDEEP

    6144:uRhcgGeQa217K4+zkEtA5amM/zmIAkWU/jpIB3nWHpcBV+UdvrEFp7hKOy:iGPaG77+zk11EzmIAtU/jpIBMSBjvrEK

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2025-01-27_5d57aef478829916d336b97167716e26_floxif_mafia

    • Size

      347KB

    • MD5

      5d57aef478829916d336b97167716e26

    • SHA1

      18e7a83e0ab9bcde6d1238784c04de98f88aa93f

    • SHA256

      ef584e44f30ccb49441ef3e6df7896f4fa89fde0cd6d97aaefa07dfe5b476ad6

    • SHA512

      a865a4a449946282179545b6a74057b04efbc74c46750d7f2b86e7e25a440e16f8688dda9789f080053e57cb7a7c54198ade67b277fbf5c5ad7a4c2e45f87209

    • SSDEEP

      6144:uRhcgGeQa217K4+zkEtA5amM/zmIAkWU/jpIB3nWHpcBV+UdvrEFp7hKOy:iGPaG77+zk11EzmIAtU/jpIBMSBjvrEK

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks