floxif | fce4eaa4e8275520a7a04946b2c4f96d4b3cf4c808ead54ac5b9a7d594cbedfb | Triage

Submit
Reports

Overview

overview

Static

static

fce4eaa4e8...fb.dll

windows7-x64

8

fce4eaa4e8...fb.dll

windows10-2004-x64

5

Sharing

General

Target

fce4eaa4e8275520a7a04946b2c4f96d4b3cf4c808ead54ac5b9a7d594cbedfb
Size

76KB
Sample

250304-l4jatsylt7
MD5

a5dbe8af4196e86872f16d32d3b8f74e
SHA1

f6d2105ecde44ecfa60e26e9a60cb9953edb9457
SHA256

fce4eaa4e8275520a7a04946b2c4f96d4b3cf4c808ead54ac5b9a7d594cbedfb
SHA512

919dc94d1802d03ba02a53d9c7528464dd8cda3787285a44fecc73f57ba2e0c7b6a3925439191f7fbedadb57c444948cb51bafd500b80ce405299607a9beda07
SSDEEP

1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZF2nvlkG:c8y93KQjy7G55riF1cMo03zslkG

Score

10^/10

floxif backdoor discovery persistence privilege_escalation upx

Static task

static1

backdoor upx floxif

5 signatures

Behavioral task

behavioral1

Sample

fce4eaa4e8275520a7a04946b2c4f96d4b3cf4c808ead54ac5b9a7d594cbedfb.dll

Resource

win7-20241023-en

discovery persistence privilege_escalation upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

fce4eaa4e8275520a7a04946b2c4f96d4b3cf4c808ead54ac5b9a7d594cbedfb.dll

Resource

win10v2004-20250217-en

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  fce4eaa4e8275520a7a04946b2c4f96d4b3cf4c808ead54ac5b9a7d594cbedfb
- Size
  
  76KB
- MD5
  
  a5dbe8af4196e86872f16d32d3b8f74e
- SHA1
  
  f6d2105ecde44ecfa60e26e9a60cb9953edb9457
- SHA256
  
  fce4eaa4e8275520a7a04946b2c4f96d4b3cf4c808ead54ac5b9a7d594cbedfb
- SHA512
  
  919dc94d1802d03ba02a53d9c7528464dd8cda3787285a44fecc73f57ba2e0c7b6a3925439191f7fbedadb57c444948cb51bafd500b80ce405299607a9beda07
- SSDEEP
  
  1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZF2nvlkG:c8y93KQjy7G55riF1cMo03zslkG
Score

8^/10

discovery persistence privilege_escalation upx
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorupxfloxif

behavioral1

discoverypersistenceprivilege_escalationupx

behavioral2

© 2018-2025

Terms | Privacy