Overview

overview

10

Static

static

1

2025-01-31...ia.exe

windows7-x64

10

2025-01-31...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-31_a339333c90d86a09a5a180aa349847b4_floxif_mafia

  • Size

    2.6MB

  • Sample

    250131-by8nesyren

  • MD5

    a339333c90d86a09a5a180aa349847b4

  • SHA1

    ce5145850f7440b4a99f47922a46d5ae820387a1

  • SHA256

    525273ed903bd778dae41d93cde35882266f7af585ec247544c041f2d8c844cf

  • SHA512

    e78f1d3844c97f8bb7cdb3ed99814286c76edb36860fb4136a2139f6eff724807adf6e7cedd6e56520b1d76f06e47363078003dd8e55999cbc7d0fe7980cf0b7

  • SSDEEP

    49152:Kw6c5LN7VSjOmZ1viy920yqWlPlF3RyU9nxvG3bQYf9YFii2IRm0Smz4hJN:Yc5LN7CHZAy92iWlPlF3RyU9nhGnfsBs

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2025-01-31_a339333c90d86a09a5a180aa349847b4_floxif_mafia

    • Size

      2.6MB

    • MD5

      a339333c90d86a09a5a180aa349847b4

    • SHA1

      ce5145850f7440b4a99f47922a46d5ae820387a1

    • SHA256

      525273ed903bd778dae41d93cde35882266f7af585ec247544c041f2d8c844cf

    • SHA512

      e78f1d3844c97f8bb7cdb3ed99814286c76edb36860fb4136a2139f6eff724807adf6e7cedd6e56520b1d76f06e47363078003dd8e55999cbc7d0fe7980cf0b7

    • SSDEEP

      49152:Kw6c5LN7VSjOmZ1viy920yqWlPlF3RyU9nxvG3bQYf9YFii2IRm0Smz4hJN:Yc5LN7CHZAy92iWlPlF3RyU9nhGnfsBs

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks