General

  • Target

    0371c6ce73013cab6d6bdd6390ce7fa31257c1ce531827a4e80f941f0b2377fd

  • Size

    277KB

  • Sample

    250128-hntvva1mgp

  • MD5

    670b0ddd5d629c5d142ca28590738269

  • SHA1

    7a32804c742af48a5bb69ca6b962d928b3383c64

  • SHA256

    0371c6ce73013cab6d6bdd6390ce7fa31257c1ce531827a4e80f941f0b2377fd

  • SHA512

    d93ac804768d20b80d2cfa26ebe9180df06ad7ba1fee5af73be3c2021a44dc44e7cf6f45d0965f0ac2455d5e4cf169ec6f7f12cc0c525b195077eb402ce28a99

  • SSDEEP

    6144:LwNBlFDvFL0C3AeIB+GClBV+UdvrEFp7hK+S:LwNBlpvFLUnB+GClBjvrEH7LS

Malware Config

Targets

    • Target

      0371c6ce73013cab6d6bdd6390ce7fa31257c1ce531827a4e80f941f0b2377fd

    • Size

      277KB

    • MD5

      670b0ddd5d629c5d142ca28590738269

    • SHA1

      7a32804c742af48a5bb69ca6b962d928b3383c64

    • SHA256

      0371c6ce73013cab6d6bdd6390ce7fa31257c1ce531827a4e80f941f0b2377fd

    • SHA512

      d93ac804768d20b80d2cfa26ebe9180df06ad7ba1fee5af73be3c2021a44dc44e7cf6f45d0965f0ac2455d5e4cf169ec6f7f12cc0c525b195077eb402ce28a99

    • SSDEEP

      6144:LwNBlFDvFL0C3AeIB+GClBV+UdvrEFp7hK+S:LwNBlpvFLUnB+GClBjvrEH7LS

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks