floxif | 16e282ccd547dfe6489183b3fcc09deb31d6abaa5187807813b2d93004b9a6c6

General

Target
2026-07-28_af5f405bada46fcc69652994788ad02e_amadey_coinminer_elex_emotet_floxif_smoke-loader_stop
Size 9.8MB
Sample260729-awmshastct
SHA256 16e282ccd547dfe6489183b3fcc09deb31d6abaa5187807813b2d93004b9a6c6
MD5 af5f405bada46fcc69652994788ad02e
SHA1 6007c064466c5612cb6ca5a062379ab627094035
SHA512 eacd961fb55dac14d2e4c22e605ddc9879163c10e2b80028c75f886615b1c4868ed3694b63d6f670fc6555d4f5c9325800ecb7ccd53e529f1dd059b638eeacb2
SSDEEP 98304:E3/3zXFbl5qCvekEYWKfIAqeow+xR9gm+0g2HDE3EjErToZ7Gme8NinC:Aj5nqsEm6R9r+7kuvrT3cNiC
TLSH
T1CEA6CF00FBD6C2F5D782157624BE772A5271B6A417249BC3F3B42E3E9A322D17C36249
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-28_af5f405bada46fcc69652994788ad02e_amadey_coinminer_elex_emotet_floxif_smoke-loader_stop
- Size 9.8MB
- SHA256 16e282ccd547dfe6489183b3fcc09deb31d6abaa5187807813b2d93004b9a6c6
- MD5 af5f405bada46fcc69652994788ad02e
- SHA1 6007c064466c5612cb6ca5a062379ab627094035
- SHA512 eacd961fb55dac14d2e4c22e605ddc9879163c10e2b80028c75f886615b1c4868ed3694b63d6f670fc6555d4f5c9325800ecb7ccd53e529f1dd059b638eeacb2
- SSDEEP 98304:E3/3zXFbl5qCvekEYWKfIAqeow+xR9gm+0g2HDE3EjErToZ7Gme8NinC:Aj5nqsEm6R9r+7kuvrT3cNiC
- TLSH
  T1CEA6CF00FBD6C2F5D782157624BE772A5271B6A417249BC3F3B42E3E9A322D17C36249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif trojan upx persistence privilege_escalation
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2