General
-
Target
2025-04-03_26581bdd96e44ed4d6a819365e056164_amadey_floxif_smoke-loader
-
Size
6.3MB
-
Sample
250403-v8detatlv5
-
MD5
26581bdd96e44ed4d6a819365e056164
-
SHA1
bc9add8285dae6dffd197b7d453602c03a6f28ff
-
SHA256
771d59390f572ee8d8582f28a2f76fa4aba17099ec1323269c94d63852a52992
-
SHA512
1885d35f24c5ecbee980ce9e8e5817d0cdf50d90e4cb50127e2ad4efb9870fe3cc99aa8e38b971cdd64327fea793528ea0ea6235064782b71b5831f26e210c99
-
SSDEEP
49152:nSxKuWVAMP/BgwNFFoKeA8FtcWCL3sS+DG4EqJBTh8CAktSdM5UOWWuvks97zPoV:nSxKNAwNbcsWCfCAwSdMcH9NAd
Static task
static1
Malware Config
Targets
-
-
Target
2025-04-03_26581bdd96e44ed4d6a819365e056164_amadey_floxif_smoke-loader
-
Size
6.3MB
-
MD5
26581bdd96e44ed4d6a819365e056164
-
SHA1
bc9add8285dae6dffd197b7d453602c03a6f28ff
-
SHA256
771d59390f572ee8d8582f28a2f76fa4aba17099ec1323269c94d63852a52992
-
SHA512
1885d35f24c5ecbee980ce9e8e5817d0cdf50d90e4cb50127e2ad4efb9870fe3cc99aa8e38b971cdd64327fea793528ea0ea6235064782b71b5831f26e210c99
-
SSDEEP
49152:nSxKuWVAMP/BgwNFFoKeA8FtcWCL3sS+DG4EqJBTh8CAktSdM5UOWWuvks97zPoV:nSxKNAwNbcsWCfCAwSdMcH9NAd
-
Floxif family
-
Detects Floxif payload
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-