floxif | 43c51a1d5ce8d08b08abf50a24a505ddea218788c27eee28d499fdbc70ac9e83

General

Target
2026-07-31_34c2c8d8ced5928a9faa2ab88e6f528c_coinminer_darkgate_elex_floxif_glassworm_revil_stop
Size 1.7MB
Sample260731-1nfbkasvdy
SHA256 43c51a1d5ce8d08b08abf50a24a505ddea218788c27eee28d499fdbc70ac9e83
MD5 34c2c8d8ced5928a9faa2ab88e6f528c
SHA1 6f87be6f04f54fbeba61a20c1035c065f5acb4cf
SHA512 b912c7e9d838a130aacf75840d01f87ee79509258481960db629762852ba855bd6aad9acdd6396c3a86b40d0d6b37b20be2afd7423d097566846072cf25451ee
SSDEEP 24576:TvDxZOizW/500cYGDMxWkEU9mYSim8g1JmDYBp/0tEnwYUs/rEH7T:JMizW/5pj6cWrU0Hx1QDSp/00wYUh
TLSH
T1CA85BF02B7C2C1B7D857127951A6937E8F3AEA314729D6C3A7902E394D302D1AA3D3D7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-31_34c2c8d8ced5928a9faa2ab88e6f528c_coinminer_darkgate_elex_floxif_glassworm_revil_stop
- Size 1.7MB
- SHA256 43c51a1d5ce8d08b08abf50a24a505ddea218788c27eee28d499fdbc70ac9e83
- MD5 34c2c8d8ced5928a9faa2ab88e6f528c
- SHA1 6f87be6f04f54fbeba61a20c1035c065f5acb4cf
- SHA512 b912c7e9d838a130aacf75840d01f87ee79509258481960db629762852ba855bd6aad9acdd6396c3a86b40d0d6b37b20be2afd7423d097566846072cf25451ee
- SSDEEP 24576:TvDxZOizW/500cYGDMxWkEU9mYSim8g1JmDYBp/0tEnwYUs/rEH7T:JMizW/5pj6cWrU0Hx1QDSp/00wYUh
- TLSH
  T1CA85BF02B7C2C1B7D857127951A6937E8F3AEA314729D6C3A7902E394D302D1AA3D3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif trojan upx persistence privilege_escalation
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2