floxif | 32430a7203a10f34e227be0a9f0a984263e8e363c684ede12044abeec8198f01

General

Target
2026-08-08_49e1390df7cd2ce287c61b7ae0536652_amadey_elex_floxif_glassworm_smoke-loader_stop
Size 4.7MB
Sample260808-wj74kabl8w
SHA256 32430a7203a10f34e227be0a9f0a984263e8e363c684ede12044abeec8198f01
MD5 49e1390df7cd2ce287c61b7ae0536652
SHA1 ac5da888e7d55fa691ea54f00be3b0a85328bd13
SHA512 ff411a5d8e1d6f5974f3847e44b09591c5e0dc13ba9658139321ab6e9d9fa8a7bb9c29f71406bdb9148df521ddaf1880539fe755bd2ff834810b89a985631697
SSDEEP 49152:XMCsmktDtnYYyOu/AU6cPWhRZ0TJCCZ1pSzdRn1tNWdo6px49c8e/0b5sXl:XTktDtJyO9zcPWhRZ0FwtTG0b5s1
TLSH
T15836AE41EBCB41F1ED865975A13B3717DA3A970C833295DBEB902D60EC213E3647E286
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-08_49e1390df7cd2ce287c61b7ae0536652_amadey_elex_floxif_glassworm_smoke-loader_stop
- Size 4.7MB
- SHA256 32430a7203a10f34e227be0a9f0a984263e8e363c684ede12044abeec8198f01
- MD5 49e1390df7cd2ce287c61b7ae0536652
- SHA1 ac5da888e7d55fa691ea54f00be3b0a85328bd13
- SHA512 ff411a5d8e1d6f5974f3847e44b09591c5e0dc13ba9658139321ab6e9d9fa8a7bb9c29f71406bdb9148df521ddaf1880539fe755bd2ff834810b89a985631697
- SSDEEP 49152:XMCsmktDtnYYyOu/AU6cPWhRZ0TJCCZ1pSzdRn1tNWdo6px49c8e/0b5sXl:XTktDtJyO9zcPWhRZ0FwtTG0b5s1
- TLSH
  T15836AE41EBCB41F1ED865975A13B3717DA3A970C833295DBEB902D60EC213E3647E286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif persistence privilege_escalation trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2