floxif | 98c3fbeaa71ef496c04cd2e994161b648ced2dd569d195c96e91bfaa4141da26

General

Target
2026-08-08_58a0c449bc0c4b59d64bb3e9cac4834a_amadey_elex_floxif_icedid_remcos_smoke-loader_stop
Size 10.3MB
Sample260808-wgaqaabk7s
SHA256 98c3fbeaa71ef496c04cd2e994161b648ced2dd569d195c96e91bfaa4141da26
MD5 58a0c449bc0c4b59d64bb3e9cac4834a
SHA1 d8dfcd1f7cc5f2e7de3cd85797112c4ff3b5e8f6
SHA512 90d5afbbc2ecafaa62bce3028bb6f7001186ac58b2689a8be263888d8693003c4d37ef5f74fc1b4a9525a7c0ab1f70b1a59084509f4ec87facf49e0d81c2c3dc
SSDEEP 196608:4LPtx1E825MXxsVDuCE400LxMOznowXXvaM3nObWxNplVMl/F:wxE825y6Dj00LxBrowv53SWdlulN
TLSH
T127B60111BBD9C0BAE5A32570C9BA52FD8235BC21D73482DB53D03E1E3DB15C25A3636A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-08_58a0c449bc0c4b59d64bb3e9cac4834a_amadey_elex_floxif_icedid_remcos_smoke-loader_stop
- Size 10.3MB
- SHA256 98c3fbeaa71ef496c04cd2e994161b648ced2dd569d195c96e91bfaa4141da26
- MD5 58a0c449bc0c4b59d64bb3e9cac4834a
- SHA1 d8dfcd1f7cc5f2e7de3cd85797112c4ff3b5e8f6
- SHA512 90d5afbbc2ecafaa62bce3028bb6f7001186ac58b2689a8be263888d8693003c4d37ef5f74fc1b4a9525a7c0ab1f70b1a59084509f4ec87facf49e0d81c2c3dc
- SSDEEP 196608:4LPtx1E825MXxsVDuCE400LxMOznowXXvaM3nObWxNplVMl/F:wxE825y6Dj00LxBrowv53SWdlulN
- TLSH
  T127B60111BBD9C0BAE5A32570C9BA52FD8235BC21D73482DB53D03E1E3DB15C25A3636A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware backdoor discovery floxif persistence privilege_escalation spyware trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2