General

  • Target

    5c4dcbca427d230a3e96cd3c686c9f5da19201c6fc0475663b6ca9b8871a8dd2

  • Size

    277KB

  • Sample

    250202-lcwf3svpft

  • MD5

    8fdb98cdd96d0d14d22c06f21cb78ee6

  • SHA1

    faba123a21da84265998151b65b3c133f0a455dc

  • SHA256

    5c4dcbca427d230a3e96cd3c686c9f5da19201c6fc0475663b6ca9b8871a8dd2

  • SHA512

    ece428353065584e6d650a42afef23509c451bbf8c5b3ad7800bb02559d08e398aece8f996dd62ddcb65ccedef41d63fa658532f80ea05f35d9db7606e0393c3

  • SSDEEP

    6144:DsA+l/DRfkTC3dM7B+2CJBV+UdvrEFp7hKDU:DsA+lbRfky6B+2CJBjvrEH7gU

Malware Config

Targets

    • Target

      5c4dcbca427d230a3e96cd3c686c9f5da19201c6fc0475663b6ca9b8871a8dd2

    • Size

      277KB

    • MD5

      8fdb98cdd96d0d14d22c06f21cb78ee6

    • SHA1

      faba123a21da84265998151b65b3c133f0a455dc

    • SHA256

      5c4dcbca427d230a3e96cd3c686c9f5da19201c6fc0475663b6ca9b8871a8dd2

    • SHA512

      ece428353065584e6d650a42afef23509c451bbf8c5b3ad7800bb02559d08e398aece8f996dd62ddcb65ccedef41d63fa658532f80ea05f35d9db7606e0393c3

    • SSDEEP

      6144:DsA+l/DRfkTC3dM7B+2CJBV+UdvrEFp7hKDU:DsA+lbRfky6B+2CJBjvrEH7gU

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks