floxif | 3cd3f52a4b0023bc1e493b5b07b14c143aedb0e4a949e035a4896079e06c39a8

General

Target
2026-07-20_0dfcbc8e38787d4964ecea647bdb6e52_amadey_avoslocker_cobalt-strike_elex_floxif_hellokitty_luca-stealer_lynx_njrat
Size 224KB
Sample260720-wr74jaax6j
SHA256 3cd3f52a4b0023bc1e493b5b07b14c143aedb0e4a949e035a4896079e06c39a8
MD5 0dfcbc8e38787d4964ecea647bdb6e52
SHA1 107829c370237fee31e7b11c2532ecf27568c896
SHA512 50f2cb80d50ffd92d0c7321bfcdf62f7f404a32977f18b7c25b5405c013820809e80002aa7468cb591e5af4ba8fcb08dce2cd76bd25f59cbe60d40c932bf7513
SSDEEP 6144:ayY2zi7ajvRcGLKZH2FaGNw9hH4JdBV+UdvrEFp7hKZMmB4:ayY2zi+jvtC9hH4JdBjvrEH7oDi
TLSH
T18A24BF4439C0C3F5D8B228303578A6705DFDFD3C0E665A9B930915799E2C9D2AA68F2F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-20_0dfcbc8e38787d4964ecea647bdb6e52_amadey_avoslocker_cobalt-strike_elex_floxif_hellokitty_luca-stealer_lynx_njrat
- Size 224KB
- SHA256 3cd3f52a4b0023bc1e493b5b07b14c143aedb0e4a949e035a4896079e06c39a8
- MD5 0dfcbc8e38787d4964ecea647bdb6e52
- SHA1 107829c370237fee31e7b11c2532ecf27568c896
- SHA512 50f2cb80d50ffd92d0c7321bfcdf62f7f404a32977f18b7c25b5405c013820809e80002aa7468cb591e5af4ba8fcb08dce2cd76bd25f59cbe60d40c932bf7513
- SSDEEP 6144:ayY2zi7ajvRcGLKZH2FaGNw9hH4JdBV+UdvrEFp7hKZMmB4:ayY2zi+jvtC9hH4JdBjvrEH7oDi
- TLSH
  T18A24BF4439C0C3F5D8B228303578A6705DFDFD3C0E665A9B930915799E2C9D2AA68F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif persistence privilege_escalation trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2