General

  • Target

    53968b9da2e5a359ae95f2644ad2c649d02629026021f432cc0ce751410d5f65

  • Size

    241KB

  • Sample

    250206-hvz1fawrfv

  • MD5

    070c2ef0f5ea25ad5c9b51cf534a07b4

  • SHA1

    8b7020fdc5e03353fb3d0ba8c3f0c57875c2c8db

  • SHA256

    53968b9da2e5a359ae95f2644ad2c649d02629026021f432cc0ce751410d5f65

  • SHA512

    db5db4994ca75d222c37d6e4c91043b526e23ad5d07a8b15ecb54a729bff18758899090de05473b0b93b3f841fac4e6628436c8d314fdeb7f4146766dacae5e0

  • SSDEEP

    6144:eMOiP/aK2h9H/B+rwNBV+UdvrEFp7hKY6z:eMTP/aK2vB+kNBjvrEH72z

Malware Config

Targets

    • Target

      53968b9da2e5a359ae95f2644ad2c649d02629026021f432cc0ce751410d5f65

    • Size

      241KB

    • MD5

      070c2ef0f5ea25ad5c9b51cf534a07b4

    • SHA1

      8b7020fdc5e03353fb3d0ba8c3f0c57875c2c8db

    • SHA256

      53968b9da2e5a359ae95f2644ad2c649d02629026021f432cc0ce751410d5f65

    • SHA512

      db5db4994ca75d222c37d6e4c91043b526e23ad5d07a8b15ecb54a729bff18758899090de05473b0b93b3f841fac4e6628436c8d314fdeb7f4146766dacae5e0

    • SSDEEP

      6144:eMOiP/aK2h9H/B+rwNBV+UdvrEFp7hKY6z:eMTP/aK2vB+kNBjvrEH72z

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks