Overview

overview

10

Static

static

1

596c390c10...eN.exe

windows7-x64

10

596c390c10...eN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    596c390c10e59f5579457c5d6cb042a139b387d910739a2da10143df9bb17a9eN.exe

  • Size

    159KB

  • Sample

    250205-rb57sayqgs

  • MD5

    d4edee6d22b41f6b7fdf33b0a37ccbb0

  • SHA1

    818c23fc80b12998bafb3b48ff8e9992feb41682

  • SHA256

    596c390c10e59f5579457c5d6cb042a139b387d910739a2da10143df9bb17a9e

  • SHA512

    5bb13941b2260376c3680a9ce9616bc579ed4b2647158282d175ea677b699cd6e94f5a456264703baa0f4118619bbe3f3fa2f7d45a9c727eb2a5565e4f19b528

  • SSDEEP

    3072:/FsAA839SMmymS62lQBV+UdE+rECWp7hKNPUVcr:dsA/39SprSABV+UdvrEFp7hKEcr

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      596c390c10e59f5579457c5d6cb042a139b387d910739a2da10143df9bb17a9eN.exe

    • Size

      159KB

    • MD5

      d4edee6d22b41f6b7fdf33b0a37ccbb0

    • SHA1

      818c23fc80b12998bafb3b48ff8e9992feb41682

    • SHA256

      596c390c10e59f5579457c5d6cb042a139b387d910739a2da10143df9bb17a9e

    • SHA512

      5bb13941b2260376c3680a9ce9616bc579ed4b2647158282d175ea677b699cd6e94f5a456264703baa0f4118619bbe3f3fa2f7d45a9c727eb2a5565e4f19b528

    • SSDEEP

      3072:/FsAA839SMmymS62lQBV+UdE+rECWp7hKNPUVcr:dsA/39SprSABV+UdvrEFp7hKEcr

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks