General

  • Target

    f9a7636d26a7f815e8be066a51a3682612cdcd7887da1c2363c1a734d7b0f1ac

  • Size

    80KB

  • MD5

    7b0d572ae529ebe826c10d93d3176ff9

  • SHA1

    872d3e48ea0e4507d33bbd529830dee8cb811d32

  • SHA256

    f9a7636d26a7f815e8be066a51a3682612cdcd7887da1c2363c1a734d7b0f1ac

  • SHA512

    1c03d94fed70494746aa2bdb55459a17a43b673d7f108ccb8b37478dd2e27e45703b62d4dd5162f06afdfe77ba71c739db93392bbbb2b2c6516558ee1f6c2b5f

  • SSDEEP

    1536:uIcs6msUvrh8ErMInQ+4cw9NVWfjaRkE4LEl8B60Y2lfxxHZPE1ossZDuN:dcs6v68Erj3w9zWf+SEFuk0/pfPtsc8

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f9a7636d26a7f815e8be066a51a3682612cdcd7887da1c2363c1a734d7b0f1ac
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections