General

  • Target

    233cadbac50dd37ff52888038ebdfac6d008fc7a421ea52d53d16a7a699d5e76

  • Size

    229KB

  • Sample

    250403-y8ppmatsgz

  • MD5

    90678035b94a51b55f5a6f3630e7daaa

  • SHA1

    286a69de90a7c2044e6e9bf1343fed2ff2e75268

  • SHA256

    233cadbac50dd37ff52888038ebdfac6d008fc7a421ea52d53d16a7a699d5e76

  • SHA512

    75d54f2db92097df52b9f39fe06a77d3997b32297b21c2cd86de4a8e982d73e2c152e48b888b39ad89f77acf809cf9688860f8eebe8e0fdce9ca91a7319ca576

  • SSDEEP

    6144:fwW3JKUwC7yqPaKpdmfUAwtBV+UdvrEFp7hKgc:XAUwCZP3dowtBjvrEH7w

Malware Config

Targets

    • Target

      233cadbac50dd37ff52888038ebdfac6d008fc7a421ea52d53d16a7a699d5e76

    • Size

      229KB

    • MD5

      90678035b94a51b55f5a6f3630e7daaa

    • SHA1

      286a69de90a7c2044e6e9bf1343fed2ff2e75268

    • SHA256

      233cadbac50dd37ff52888038ebdfac6d008fc7a421ea52d53d16a7a699d5e76

    • SHA512

      75d54f2db92097df52b9f39fe06a77d3997b32297b21c2cd86de4a8e982d73e2c152e48b888b39ad89f77acf809cf9688860f8eebe8e0fdce9ca91a7319ca576

    • SSDEEP

      6144:fwW3JKUwC7yqPaKpdmfUAwtBV+UdvrEFp7hKgc:XAUwCZP3dowtBjvrEH7w

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks