Overview

overview

10

Static

static

3

99311778b9...e4.exe

windows7-x64

10

99311778b9...e4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    99311778b99d56777ce6f121953b95ee0d4d2a7ac960f1b4740f4ac6417ef7e4

  • Size

    665KB

  • Sample

    250207-ysgn3swphq

  • MD5

    369370d67ab3a5342dabacea246ea3d9

  • SHA1

    4e82f5f73a18bd00d16d261c40050299c87f2af5

  • SHA256

    99311778b99d56777ce6f121953b95ee0d4d2a7ac960f1b4740f4ac6417ef7e4

  • SHA512

    ef242599cff955b1cf0ca7882f9c002748dd4d858ad5e6d215056dd65c42a8dd9066b6f40eeadc72799308ede33974f4e81079fc908bf44266b6a6961dffffbe

  • SSDEEP

    12288:XubXcPafJcLlnvrQwnVWqqPIBONhxsU/EbBjvrEH7i:XurI9Or/xsU/EhrEH7i

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      99311778b99d56777ce6f121953b95ee0d4d2a7ac960f1b4740f4ac6417ef7e4

    • Size

      665KB

    • MD5

      369370d67ab3a5342dabacea246ea3d9

    • SHA1

      4e82f5f73a18bd00d16d261c40050299c87f2af5

    • SHA256

      99311778b99d56777ce6f121953b95ee0d4d2a7ac960f1b4740f4ac6417ef7e4

    • SHA512

      ef242599cff955b1cf0ca7882f9c002748dd4d858ad5e6d215056dd65c42a8dd9066b6f40eeadc72799308ede33974f4e81079fc908bf44266b6a6961dffffbe

    • SSDEEP

      12288:XubXcPafJcLlnvrQwnVWqqPIBONhxsU/EbBjvrEH7i:XurI9Or/xsU/EhrEH7i

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • Downloads MZ/PE file

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks