floxif | f9a7636d26a7f815e8be066a51a3682612cdcd7887da1c2363c1a734d7b0f1ac | Triage

Submit
Reports

Overview

overview

Static

static

f9a7636d26...ac.dll

windows7-x64

6

f9a7636d26...ac.dll

windows10-2004-x64

8

Sharing

General

Target

f9a7636d26a7f815e8be066a51a3682612cdcd7887da1c2363c1a734d7b0f1ac
Size

80KB
Sample

250218-j3k2xsypdj
MD5

7b0d572ae529ebe826c10d93d3176ff9
SHA1

872d3e48ea0e4507d33bbd529830dee8cb811d32
SHA256

f9a7636d26a7f815e8be066a51a3682612cdcd7887da1c2363c1a734d7b0f1ac
SHA512

1c03d94fed70494746aa2bdb55459a17a43b673d7f108ccb8b37478dd2e27e45703b62d4dd5162f06afdfe77ba71c739db93392bbbb2b2c6516558ee1f6c2b5f
SSDEEP

1536:uIcs6msUvrh8ErMInQ+4cw9NVWfjaRkE4LEl8B60Y2lfxxHZPE1ossZDuN:dcs6v68Erj3w9zWf+SEFuk0/pfPtsc8

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

f9a7636d26a7f815e8be066a51a3682612cdcd7887da1c2363c1a734d7b0f1ac.dll

Resource

win7-20241010-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

f9a7636d26a7f815e8be066a51a3682612cdcd7887da1c2363c1a734d7b0f1ac.dll

Resource

win10v2004-20250217-en

discovery persistence privilege_escalation upx

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  f9a7636d26a7f815e8be066a51a3682612cdcd7887da1c2363c1a734d7b0f1ac
- Size
  
  80KB
- MD5
  
  7b0d572ae529ebe826c10d93d3176ff9
- SHA1
  
  872d3e48ea0e4507d33bbd529830dee8cb811d32
- SHA256
  
  f9a7636d26a7f815e8be066a51a3682612cdcd7887da1c2363c1a734d7b0f1ac
- SHA512
  
  1c03d94fed70494746aa2bdb55459a17a43b673d7f108ccb8b37478dd2e27e45703b62d4dd5162f06afdfe77ba71c739db93392bbbb2b2c6516558ee1f6c2b5f
- SSDEEP
  
  1536:uIcs6msUvrh8ErMInQ+4cw9NVWfjaRkE4LEl8B60Y2lfxxHZPE1ossZDuN:dcs6v68Erj3w9zWf+SEFuk0/pfPtsc8
Score

8^/10

discovery upx persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

behavioral2

discoverypersistenceprivilege_escalationupx

© 2018-2025

Terms | Privacy