Overview

overview

10

Static

static

1

f4c78c80b1...da.exe

windows7-x64

10

f4c78c80b1...da.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4c78c80b1a41aefdbe7467c6ad5d89713eb50f12113c65ce7a234a3eda904da

  • Size

    2.7MB

  • Sample

    250303-wn1kaavscz

  • MD5

    f772851fe20fd84604f5bd6d39403c04

  • SHA1

    36dfe88d6a16c54fa99a0c017bbcc6eec601cb4f

  • SHA256

    f4c78c80b1a41aefdbe7467c6ad5d89713eb50f12113c65ce7a234a3eda904da

  • SHA512

    8e60d5918b764e09bd7a9e7cdafc0cc49ed03083f28b518bd1b93dd31d2d4d1b7dd43811be724b8c7218348fcdd5ca8edbede498f21b0ac814dc9754872f5ed9

  • SSDEEP

    49152:zPE6vXDUOYQMqclLy0wsXuhXabboP4ACQDAkn9CwlzI8ndbyw+AZ/WY4N2WwW/Kq:LFvXfMFLySXuhXa/oP4ACYAkn9CMIcy9

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      f4c78c80b1a41aefdbe7467c6ad5d89713eb50f12113c65ce7a234a3eda904da

    • Size

      2.7MB

    • MD5

      f772851fe20fd84604f5bd6d39403c04

    • SHA1

      36dfe88d6a16c54fa99a0c017bbcc6eec601cb4f

    • SHA256

      f4c78c80b1a41aefdbe7467c6ad5d89713eb50f12113c65ce7a234a3eda904da

    • SHA512

      8e60d5918b764e09bd7a9e7cdafc0cc49ed03083f28b518bd1b93dd31d2d4d1b7dd43811be724b8c7218348fcdd5ca8edbede498f21b0ac814dc9754872f5ed9

    • SSDEEP

      49152:zPE6vXDUOYQMqclLy0wsXuhXabboP4ACQDAkn9CwlzI8ndbyw+AZ/WY4N2WwW/Kq:LFvXfMFLySXuhXa/oP4ACYAkn9CMIcy9

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks