floxif | bb4e250492135f6e0338198714e2d1c4b2b4692a8ae6f3b32fab5afd0674b661

General

Target
2026-08-08_81803ec9c5634c80ad6690db3da7c1e4_agent-tesla_darkgate_elex_floxif_hawkeye_maze_remcos
Size 5.0MB
Sample260808-v9n8ps1hlb
SHA256 bb4e250492135f6e0338198714e2d1c4b2b4692a8ae6f3b32fab5afd0674b661
MD5 81803ec9c5634c80ad6690db3da7c1e4
SHA1 18146373c7449ffe69541674afe936817519e997
SHA512 1ce4d7791722768ef00ba561c19b2a6f32617aa5003bdb3ba8edefe82fefc4ff8788abda60422bb306559727781a5f69e139a002a04e3aa35666cfa15ccab611
SSDEEP 98304:4/sjkN90IapRS+gt8TR0I7ETKzYaOgHsJ5loJI3E+6H9bDIAvQVdWZPm1ou+bw:LjY90Ia/S+08WI7EWzYaOgHG5DkYQ9Z6
TLSH
T19936222263CD93B0CB769133BF69B3053EBB78290534F94B2F841D79A954172262DB63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-08_81803ec9c5634c80ad6690db3da7c1e4_agent-tesla_darkgate_elex_floxif_hawkeye_maze_remcos
- Size 5.0MB
- SHA256 bb4e250492135f6e0338198714e2d1c4b2b4692a8ae6f3b32fab5afd0674b661
- MD5 81803ec9c5634c80ad6690db3da7c1e4
- SHA1 18146373c7449ffe69541674afe936817519e997
- SHA512 1ce4d7791722768ef00ba561c19b2a6f32617aa5003bdb3ba8edefe82fefc4ff8788abda60422bb306559727781a5f69e139a002a04e3aa35666cfa15ccab611
- SSDEEP 98304:4/sjkN90IapRS+gt8TR0I7ETKzYaOgHsJ5loJI3E+6H9bDIAvQVdWZPm1ou+bw:LjY90Ia/S+08WI7EWzYaOgHG5DkYQ9Z6
- TLSH
  T19936222263CD93B0CB769133BF69B3053EBB78290534F94B2F841D79A954172262DB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif persistence privilege_escalation trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2