General

  • Target
    2025-01-28_9c487396f1c70ab283e1bfd2571cd3fb_floxif_mafia
  • Size 3.4MB
  • Sample250128-cfc98stpcl
  • SHA256 d8577830b2418f8441f27b413c50645ff4f829d9e984df1bf86fe518779ea4d7
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      2025-01-28_9c487396f1c70ab283e1bfd2571cd3fb_floxif_mafia
    • Size 3.4MB
    • SHA256 d8577830b2418f8441f27b413c50645ff4f829d9e984df1bf86fe518779ea4d7
    • MD5 SHA1 SHA512 SSDEEP
    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks