floxif | fe8515b71fd5a0e5fe43145574df46e24eb8497c7ec599cadf5e165198464ee1

General

Target
2026-06-04_41433f0ad2a90eeac20ae95550f084b6_amadey_elex_floxif_redline-stealer_smoke-loader_stealc_tofsee
Size 1.5MB
Sample260604-mldhascx2w
SHA256 fe8515b71fd5a0e5fe43145574df46e24eb8497c7ec599cadf5e165198464ee1
MD5 41433f0ad2a90eeac20ae95550f084b6
SHA1 d4aa8dd5d41431898d80c7573cd6b75e565b8b57
SHA512 194bef0a29e0a4045a229f5e2d8fb6b7766ba89657eb42e00d3283b477d4bad5f59351a13a82d7aa8b7699aaa59de9114fe943daec586357674b0fcc1c0305ec
SSDEEP 24576:JasBlJ/jaMSmtLvUDSRbm4Jah1rVxpYRsQ0AQu72O8vUDcsBisPrrEH7+:JPlJ/jCeTUDBzrVx6RPgkiLc7
TLSH
T1B875232232A0C3F7D09354307AE8AB70A9FA763E16350147F75857191EAE7C2667732B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-06-04_41433f0ad2a90eeac20ae95550f084b6_amadey_elex_floxif_redline-stealer_smoke-loader_stealc_tofsee
- Size 1.5MB
- SHA256 fe8515b71fd5a0e5fe43145574df46e24eb8497c7ec599cadf5e165198464ee1
- MD5 41433f0ad2a90eeac20ae95550f084b6
- SHA1 d4aa8dd5d41431898d80c7573cd6b75e565b8b57
- SHA512 194bef0a29e0a4045a229f5e2d8fb6b7766ba89657eb42e00d3283b477d4bad5f59351a13a82d7aa8b7699aaa59de9114fe943daec586357674b0fcc1c0305ec
- SSDEEP 24576:JasBlJ/jaMSmtLvUDSRbm4Jah1rVxpYRsQ0AQu72O8vUDcsBisPrrEH7+:JPlJ/jCeTUDBzrVx6RPgkiLc7
- TLSH
  T1B875232232A0C3F7D09354307AE8AB70A9FA763E16350147F75857191EAE7C2667732B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif trojan upx persistence privilege_escalation
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2