floxif | f4fc360a9a23e798e671fa66b5a26367c740dc9a2e62b3b6bc838357949970cb

General

Target
2026-06-28_58f88ae6811d375fa948da5ba2936fe3_coinminer_driverpack_elex_floxif_wannacry
Size 7.3MB
Sample260628-2dmtbsgt3j
SHA256 f4fc360a9a23e798e671fa66b5a26367c740dc9a2e62b3b6bc838357949970cb
MD5 58f88ae6811d375fa948da5ba2936fe3
SHA1 3b8f903b495c28d64092f70c1d25beebbd32e00b
SHA512 077a36da355732ed1411145fba8880335e848b87be2475f81102a69f5a3d735f5d41b28d80a09288ac09d6550f29868fb4932803131f76932e2c4172a9053aec
SSDEEP 196608:v5kF+vGrCIDuZMCvMDoiKq5ZCUixN8K0QS6XtdzRtmkD9lCX7Sd:v5kMurjuWrMxIYU2J0QS0td3rlr
TLSH
T1CA763311379543F9C6C86430654EF7A029D4E6AC23BA05D7E386B901BD393C6EABE0D7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-06-28_58f88ae6811d375fa948da5ba2936fe3_coinminer_driverpack_elex_floxif_wannacry
- Size 7.3MB
- SHA256 f4fc360a9a23e798e671fa66b5a26367c740dc9a2e62b3b6bc838357949970cb
- MD5 58f88ae6811d375fa948da5ba2936fe3
- SHA1 3b8f903b495c28d64092f70c1d25beebbd32e00b
- SHA512 077a36da355732ed1411145fba8880335e848b87be2475f81102a69f5a3d735f5d41b28d80a09288ac09d6550f29868fb4932803131f76932e2c4172a9053aec
- SSDEEP 196608:v5kF+vGrCIDuZMCvMDoiKq5ZCUixN8K0QS6XtdzRtmkD9lCX7Sd:v5kMurjuWrMxIYU2J0QS0td3rlr
- TLSH
  T1CA763311379543F9C6C86430654EF7A029D4E6AC23BA05D7E386B901BD393C6EABE0D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor defense_evasion discovery execution floxif spyware trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Downloads MZ/PE file
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2