Overview

overview

10

Static

static

1

2025-01-31...ia.exe

windows7-x64

10

2025-01-31...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-31_a3405a4470d9d1384b3a943811acb2ac_floxif_mafia

  • Size

    541KB

  • Sample

    250131-lj9maasjaz

  • MD5

    a3405a4470d9d1384b3a943811acb2ac

  • SHA1

    7089ebd27d61820b0fcc3e03c6c571bc636fecf1

  • SHA256

    864253ba492630d6c43f06541a487c7b1b6836b766fd0325465e767d99e9ef2c

  • SHA512

    9dbf8503911d11e6f70f7269c6cd57f4a9ef6e157349cdecfde61fa70d114c41037b56f2e459a7466c928b09796c62274c0e9687c3267aaea0b2a209acc81116

  • SSDEEP

    12288:eEbC+WPnBZKXBaNS4OD4S3haRDGoKByWlWLKKIBjvrEH7B:eNKJrD44hTDyaoKK6rEH7B

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2025-01-31_a3405a4470d9d1384b3a943811acb2ac_floxif_mafia

    • Size

      541KB

    • MD5

      a3405a4470d9d1384b3a943811acb2ac

    • SHA1

      7089ebd27d61820b0fcc3e03c6c571bc636fecf1

    • SHA256

      864253ba492630d6c43f06541a487c7b1b6836b766fd0325465e767d99e9ef2c

    • SHA512

      9dbf8503911d11e6f70f7269c6cd57f4a9ef6e157349cdecfde61fa70d114c41037b56f2e459a7466c928b09796c62274c0e9687c3267aaea0b2a209acc81116

    • SSDEEP

      12288:eEbC+WPnBZKXBaNS4OD4S3haRDGoKByWlWLKKIBjvrEH7B:eNKJrD44hTDyaoKK6rEH7B

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks