Overview

overview

10

Static

static

1

c9a9ce56b4...db.dll

windows7-x64

10

c9a9ce56b4...db.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9a9ce56b4f7ea4805da086a96933a33e3f5c3790a72e66664e11c60f27a00db

  • Size

    377KB

  • Sample

    250303-qje5wsywcz

  • MD5

    ad786cc494d2921292db12c711a88256

  • SHA1

    b3a1879fcfef3b5a6d06dff5cc8012c52067374d

  • SHA256

    c9a9ce56b4f7ea4805da086a96933a33e3f5c3790a72e66664e11c60f27a00db

  • SHA512

    79536f8478257d095ea7d35966c186d74e76e8bb58d7a240a31a04e507dd0b72a1c56c58a600a36d8def23bf661c60f7c7f065f4716d5b31e590b0fc16ca67a2

  • SSDEEP

    6144:IbXKbqxdjkUe+wQ+Rm60lb/vt/JYb+QMd6wSn0S6pCcBV+UdvrEFp7hK4nsk:IbTT1Bb/vt/JYb+QMd6wSzsvBjvrEH7B

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      c9a9ce56b4f7ea4805da086a96933a33e3f5c3790a72e66664e11c60f27a00db

    • Size

      377KB

    • MD5

      ad786cc494d2921292db12c711a88256

    • SHA1

      b3a1879fcfef3b5a6d06dff5cc8012c52067374d

    • SHA256

      c9a9ce56b4f7ea4805da086a96933a33e3f5c3790a72e66664e11c60f27a00db

    • SHA512

      79536f8478257d095ea7d35966c186d74e76e8bb58d7a240a31a04e507dd0b72a1c56c58a600a36d8def23bf661c60f7c7f065f4716d5b31e590b0fc16ca67a2

    • SSDEEP

      6144:IbXKbqxdjkUe+wQ+Rm60lb/vt/JYb+QMd6wSn0S6pCcBV+UdvrEFp7hK4nsk:IbTT1Bb/vt/JYb+QMd6wSzsvBjvrEH7B

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks