floxif | 0ad17a60b7929b5d294d58fd26cda6fa2892ff5391e52c2bcadc00e300762ed9

General

Target
2026-07-15_798d414b6536f7718017df64d63d1aa9_elex_floxif_hijackloader_rhadamanthys_stealc_stop
Size 305KB
Sample260715-swkl9aax71
SHA256 0ad17a60b7929b5d294d58fd26cda6fa2892ff5391e52c2bcadc00e300762ed9
MD5 798d414b6536f7718017df64d63d1aa9
SHA1 e5da1471c24b46db4e2df53c696a1da5d30149e5
SHA512 7e338720c72d034dca3eab73ba52a5e41952c0a3d88619f66e0bc513d296e9ee87a6bc455c2fe3e680775369ee497abdbe96dc2603f278b17f2b751dbd1b5ac0
SSDEEP 3072:1N2GjQA9gMdgubh/ep+ThZoS0JCGd12z7mF2lQBV+UdE+rECWp7hKgG3:D2Gs+bxepU7GmGBV+UdvrEFp7hKX
TLSH
T142647A1131C087F4D472013324AB9A2C76B9FD7D4F6A468BB394BACD0A7CDD25B39662
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-15_798d414b6536f7718017df64d63d1aa9_elex_floxif_hijackloader_rhadamanthys_stealc_stop
- Size 305KB
- SHA256 0ad17a60b7929b5d294d58fd26cda6fa2892ff5391e52c2bcadc00e300762ed9
- MD5 798d414b6536f7718017df64d63d1aa9
- SHA1 e5da1471c24b46db4e2df53c696a1da5d30149e5
- SHA512 7e338720c72d034dca3eab73ba52a5e41952c0a3d88619f66e0bc513d296e9ee87a6bc455c2fe3e680775369ee497abdbe96dc2603f278b17f2b751dbd1b5ac0
- SSDEEP 3072:1N2GjQA9gMdgubh/ep+ThZoS0JCGd12z7mF2lQBV+UdE+rECWp7hKgG3:D2Gs+bxepU7GmGBV+UdvrEFp7hKX
- TLSH
  T142647A1131C087F4D472013324AB9A2C76B9FD7D4F6A468BB394BACD0A7CDD25B39662
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif trojan upx persistence privilege_escalation
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2