General

  • Target

    1c32295954854aba7738ddef9c09721eda5a9d447331826d2f0cc37adeae3f62

  • Size

    278KB

  • Sample

    250207-g2pmlssjaw

  • MD5

    6b44ceb53219f9ba057f4a1795f6b2e8

  • SHA1

    79400c76460b9a8a9937031566a83b2f141393b8

  • SHA256

    1c32295954854aba7738ddef9c09721eda5a9d447331826d2f0cc37adeae3f62

  • SHA512

    cc129359f15ae53328ef642ae2d86fec88eaf9b00f1337b33ffc59bc55d449b98ccd14bc416062137c42f3320a100b6684dc381fb57f66537840920e626ee3a4

  • SSDEEP

    6144:mAGnl/DRfkTC3dM7B+GCuBV+UdvrEFp7hKVG3:mAGnlbRfky6B+GCuBjvrEH733

Malware Config

Targets

    • Target

      1c32295954854aba7738ddef9c09721eda5a9d447331826d2f0cc37adeae3f62

    • Size

      278KB

    • MD5

      6b44ceb53219f9ba057f4a1795f6b2e8

    • SHA1

      79400c76460b9a8a9937031566a83b2f141393b8

    • SHA256

      1c32295954854aba7738ddef9c09721eda5a9d447331826d2f0cc37adeae3f62

    • SHA512

      cc129359f15ae53328ef642ae2d86fec88eaf9b00f1337b33ffc59bc55d449b98ccd14bc416062137c42f3320a100b6684dc381fb57f66537840920e626ee3a4

    • SSDEEP

      6144:mAGnl/DRfkTC3dM7B+GCuBV+UdvrEFp7hKVG3:mAGnlbRfky6B+GCuBjvrEH733

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks