floxif | 4f3a48824e68b06103b779021df7010507c92a3988ffe76645c75bb7a3251e78

General

Target
2026-07-30_7a79495b2132d24b09303a8af99fbd08_bkransomware_darkgate_elex_floxif_hawkeye_maze_remcos
Size 2.9MB
Sample260730-sr77ra1bje
SHA256 4f3a48824e68b06103b779021df7010507c92a3988ffe76645c75bb7a3251e78
MD5 7a79495b2132d24b09303a8af99fbd08
SHA1 686ce439149b324061e12c1f6f045b7a8c5217f1
SHA512 df711519aa4e8f8b842ff37e166105be880103c8e60d3167713aa574ad9266f64a0a03e831fde125da2126e95f58c47b2256a2e6fc1199fd0a1a2096bb78eb13
SSDEEP 49152:UYghCxVJkOVTu0vns/ayLRISEXdVCV/gRksFl3UbDNCzHRBxX9VJBbJhMVyuU1Kk:zghKVJkOV3nRmyUb6RBRJhMou0
TLSH
T1FAE52212B394D3B4C5F34A302B68AA6599FDBD344E3A859BB3D45A0C19391C1BF34B27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-30_7a79495b2132d24b09303a8af99fbd08_bkransomware_darkgate_elex_floxif_hawkeye_maze_remcos
- Size 2.9MB
- SHA256 4f3a48824e68b06103b779021df7010507c92a3988ffe76645c75bb7a3251e78
- MD5 7a79495b2132d24b09303a8af99fbd08
- SHA1 686ce439149b324061e12c1f6f045b7a8c5217f1
- SHA512 df711519aa4e8f8b842ff37e166105be880103c8e60d3167713aa574ad9266f64a0a03e831fde125da2126e95f58c47b2256a2e6fc1199fd0a1a2096bb78eb13
- SSDEEP 49152:UYghCxVJkOVTu0vns/ayLRISEXdVCV/gRksFl3UbDNCzHRBxX9VJBbJhMVyuU1Kk:zghKVJkOV3nRmyUb6RBRJhMou0
- TLSH
  T1FAE52212B394D3B4C5F34A302B68AA6599FDBD344E3A859BB3D45A0C19391C1BF34B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif trojan upx persistence privilege_escalation
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2