Overview

overview

10

Static

static

3

2025-04-03...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-03_aa38af6936b6d0662cecb10f552399f9_amadey_floxif_karagany_rhadamanthys_smoke-loader

  • Size

    136KB

  • Sample

    250403-vfxb8asmv9

  • MD5

    aa38af6936b6d0662cecb10f552399f9

  • SHA1

    519e371efc275689c7d8bc4c248de0f6d0f24552

  • SHA256

    082eb2821da8ecd59067da4fe8fb9ce9231021fd26c6ab3d5da084c8cd7695a1

  • SHA512

    1287d9aca5e0df398ae81036bd38e171f2da5b4ef1890f2b64d43a05b8bc548fad48efa8ffffd0d31c47309e159d1a31f10abe2316bf0a23f07f517b04d89c82

  • SSDEEP

    3072:2V/0szYQkN0KX2lQBV+UdE+rECWp7hKJLWcA:2V/aJ0K7BV+UdvrEFp7hKJScA

Score
10/10
floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

Malware Config

Targets

    • Target

      2025-04-03_aa38af6936b6d0662cecb10f552399f9_amadey_floxif_karagany_rhadamanthys_smoke-loader

    • Size

      136KB

    • MD5

      aa38af6936b6d0662cecb10f552399f9

    • SHA1

      519e371efc275689c7d8bc4c248de0f6d0f24552

    • SHA256

      082eb2821da8ecd59067da4fe8fb9ce9231021fd26c6ab3d5da084c8cd7695a1

    • SHA512

      1287d9aca5e0df398ae81036bd38e171f2da5b4ef1890f2b64d43a05b8bc548fad48efa8ffffd0d31c47309e159d1a31f10abe2316bf0a23f07f517b04d89c82

    • SSDEEP

      3072:2V/0szYQkN0KX2lQBV+UdE+rECWp7hKJLWcA:2V/aJ0K7BV+UdvrEFp7hKJScA

    Score
    10/10
    floxifbackdoordiscoverypersistenceprivilege_escalationtrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks