General

  • Target

    2025-02-03_035e28aec3f63a0c68058bade417dfd9_floxif_mafia

  • Size

    339KB

  • Sample

    250203-f2lehs1pas

  • MD5

    035e28aec3f63a0c68058bade417dfd9

  • SHA1

    e8037534b341ac0b043e0fc16728eb3a75c0087c

  • SHA256

    ce3f2baa598fe52dd430a701c2f099bffad977f42020293fb109f1cc4e854a92

  • SHA512

    7d3d12192ffa277d8ede714f39f60fe038b552b6a14d579a3a60bee828fb2fa474b057a97121fe126ab612b937f6f3ab980b2e36a26c124a37736988a2f82c95

  • SSDEEP

    6144:sUSQ/BVAeKS5w84BR4+qwk9HYpFOXDm3/ruhwIBV+UdvrEFp7hKN54D7:sUSQ/BKiw8C4+rk9cFADfwIBjvrEH7cg

Malware Config

Targets

    • Target

      2025-02-03_035e28aec3f63a0c68058bade417dfd9_floxif_mafia

    • Size

      339KB

    • MD5

      035e28aec3f63a0c68058bade417dfd9

    • SHA1

      e8037534b341ac0b043e0fc16728eb3a75c0087c

    • SHA256

      ce3f2baa598fe52dd430a701c2f099bffad977f42020293fb109f1cc4e854a92

    • SHA512

      7d3d12192ffa277d8ede714f39f60fe038b552b6a14d579a3a60bee828fb2fa474b057a97121fe126ab612b937f6f3ab980b2e36a26c124a37736988a2f82c95

    • SSDEEP

      6144:sUSQ/BVAeKS5w84BR4+qwk9HYpFOXDm3/ruhwIBV+UdvrEFp7hKN54D7:sUSQ/BKiw8C4+rk9cFADfwIBjvrEH7cg

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks