General

  • Target

    7b6702ff0a5025994937b07feb62578aa7b4c24934522d8f7e210869a1ab9b34

  • Size

    811KB

  • Sample

    250130-a613watqew

  • MD5

    ddeb9bdd778bbf9404a6f86fbc339e9a

  • SHA1

    ec8937cfa75aa589f7f773e5cf91c4f1966c959b

  • SHA256

    7b6702ff0a5025994937b07feb62578aa7b4c24934522d8f7e210869a1ab9b34

  • SHA512

    29242821bcfe103dee728fe1a3a4a7fafb520723966e78865ad1d649f685ab9e1b866814a2c737f314f643386537d5dd98b34ee4e449a5a24d9b636a807c66bd

  • SSDEEP

    24576:OIegCWSpRyudSJVDsVu5unzqWvX1SrEH7H:CWSjFSJlsQuzqW/1B

Malware Config

Targets

    • Target

      7b6702ff0a5025994937b07feb62578aa7b4c24934522d8f7e210869a1ab9b34

    • Size

      811KB

    • MD5

      ddeb9bdd778bbf9404a6f86fbc339e9a

    • SHA1

      ec8937cfa75aa589f7f773e5cf91c4f1966c959b

    • SHA256

      7b6702ff0a5025994937b07feb62578aa7b4c24934522d8f7e210869a1ab9b34

    • SHA512

      29242821bcfe103dee728fe1a3a4a7fafb520723966e78865ad1d649f685ab9e1b866814a2c737f314f643386537d5dd98b34ee4e449a5a24d9b636a807c66bd

    • SSDEEP

      24576:OIegCWSpRyudSJVDsVu5unzqWvX1SrEH7H:CWSjFSJlsQuzqW/1B

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks