Overview

overview

10

Static

static

1

08ac130878...81.dll

windows7-x64

10

08ac130878...81.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08ac13087889a9231c4088244ab1f4cfe9fb9e9d971cf9a200a51e4944810581

  • Size

    2.3MB

  • Sample

    250303-x9fmnswya1

  • MD5

    f4377b5f31947d48bbf5182179adbb5a

  • SHA1

    88bec688f0bf5e6744d482b92359737ca28bca3f

  • SHA256

    08ac13087889a9231c4088244ab1f4cfe9fb9e9d971cf9a200a51e4944810581

  • SHA512

    7026b48e88b3e3cdecc5a8000529849b6416e37836e98bd0a596b250c0161047b6903e63fd93bfc0c17dfd20ee056c3f94c7eae1143061803c23b8632fb58cf4

  • SSDEEP

    49152:bJQY/NWBfVOCP8GJsv6tWKFdu9CyTLuyb7+:bJFWbJdJsv6tWKFdu9Cebi

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

Malware Config

Targets

    • Target

      08ac13087889a9231c4088244ab1f4cfe9fb9e9d971cf9a200a51e4944810581

    • Size

      2.3MB

    • MD5

      f4377b5f31947d48bbf5182179adbb5a

    • SHA1

      88bec688f0bf5e6744d482b92359737ca28bca3f

    • SHA256

      08ac13087889a9231c4088244ab1f4cfe9fb9e9d971cf9a200a51e4944810581

    • SHA512

      7026b48e88b3e3cdecc5a8000529849b6416e37836e98bd0a596b250c0161047b6903e63fd93bfc0c17dfd20ee056c3f94c7eae1143061803c23b8632fb58cf4

    • SSDEEP

      49152:bJQY/NWBfVOCP8GJsv6tWKFdu9CyTLuyb7+:bJFWbJdJsv6tWKFdu9Cebi

    Score
    10/10
    floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks