floxif | a6d991774cc7430498e8865578444ceb13f7646752e547bc4346d46353a421e8

General

Target
2026-08-04_fc308cd9c7a603bda3e918c385648d45_amadey_darkgate_elex_floxif_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry
Size 3.2MB
Sample260804-vytdaaec74
SHA256 a6d991774cc7430498e8865578444ceb13f7646752e547bc4346d46353a421e8
MD5 fc308cd9c7a603bda3e918c385648d45
SHA1 17fc631518f563f502e35c293c46737df88d7882
SHA512 aceb644a1629c4498bfa2557e7eb2533f7111ac24ffd5b11e4c220791f1a13bf7c0daf0d8abd8357fe2143ad6500eac3e885af33a411a8d48d8d651ae4e7af62
SSDEEP 49152:+d1H1D7iKzUfjpNG4h7iuxTc7RDpK7WkAbJa5nUmCmIZDgNWT30UNJqf3ZOWXD:MnCG4h7FiRA7WkAbJ0rCmIZDjNJEB
TLSH
T1ACF5AE217DB14627C46303328D6EF67D316DBD741B3481C763CB3A582D386E26A3A66B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-04_fc308cd9c7a603bda3e918c385648d45_amadey_darkgate_elex_floxif_glassworm_luca-stealer_njrat_smoke-loader_swisyn_wannacry
- Size 3.2MB
- SHA256 a6d991774cc7430498e8865578444ceb13f7646752e547bc4346d46353a421e8
- MD5 fc308cd9c7a603bda3e918c385648d45
- SHA1 17fc631518f563f502e35c293c46737df88d7882
- SHA512 aceb644a1629c4498bfa2557e7eb2533f7111ac24ffd5b11e4c220791f1a13bf7c0daf0d8abd8357fe2143ad6500eac3e885af33a411a8d48d8d651ae4e7af62
- SSDEEP 49152:+d1H1D7iKzUfjpNG4h7iuxTc7RDpK7WkAbJa5nUmCmIZDgNWT30UNJqf3ZOWXD:MnCG4h7FiRA7WkAbJ0rCmIZDjNJEB
- TLSH
  T1ACF5AE217DB14627C46303328D6EF67D316DBD741B3481C763CB3A582D386E26A3A66B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor defense_evasion discovery floxif persistence trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Modifies visibility of hidden/system files in Explorer
  defense_evasion
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2