floxif | 0392c8882c728f784672d191b8706c62f22d365365061c540401293fd3a464f5

General

Target
2026-05-16_6b19165c03e72623f8cce920c5194025_coinminer_elex_floxif_wannacry
Size 1.3MB
Sample260516-lv7basct6y
SHA256 0392c8882c728f784672d191b8706c62f22d365365061c540401293fd3a464f5
MD5 6b19165c03e72623f8cce920c5194025
SHA1 5dccfb36a7b5964fb8438b9df4c189ad9bc05297
SHA512 a7da13532a611ac8d68de50e190645eaf97c7316f43fb8769c45064f70a019c8754df51e5f3e61249345b43c615f64d5c4ab33e8b4315d703494da4e166b64de
SSDEEP 24576:n53AFzHColM5y/4XnEh5spG3U44wT7tzdMIpdyuZuG+OZVgrEH7D:n5wF+/5g4UsY3U4F7tz7Xy/g9
TLSH
T1F565019724E103F9DA8ED2303C8267B945BBAD2D4F570B87F7623D023A78489776E905
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-05-16_6b19165c03e72623f8cce920c5194025_coinminer_elex_floxif_wannacry
- Size 1.3MB
- SHA256 0392c8882c728f784672d191b8706c62f22d365365061c540401293fd3a464f5
- MD5 6b19165c03e72623f8cce920c5194025
- SHA1 5dccfb36a7b5964fb8438b9df4c189ad9bc05297
- SHA512 a7da13532a611ac8d68de50e190645eaf97c7316f43fb8769c45064f70a019c8754df51e5f3e61249345b43c615f64d5c4ab33e8b4315d703494da4e166b64de
- SSDEEP 24576:n53AFzHColM5y/4XnEh5spG3U44wT7tzdMIpdyuZuG+OZVgrEH7D:n5wF+/5g4UsY3U4F7tz7Xy/g9
- TLSH
  T1F565019724E103F9DA8ED2303C8267B945BBAD2D4F570B87F7623D023A78489776E905
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif installer trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- Custom signature
  
  UPX dump on OEP (original entry point)
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2