floxif | b5e507f8edc4e82285f360abf3d2221f19341279417d11a901b6c5b4bf00934f

General

Target
2026-08-09_d1dc9703a66b1344203f37f5bcdcf0eb_amadey_coinminer_elex_floxif_smoke-loader
Size 3.3MB
Sample260809-g7887sscqb
SHA256 b5e507f8edc4e82285f360abf3d2221f19341279417d11a901b6c5b4bf00934f
MD5 d1dc9703a66b1344203f37f5bcdcf0eb
SHA1 fc95298eec444e58e84908401f38f7c76fca6143
SHA512 c524110f2db3c1dff70206aace1332bf82b764aa8d76c1ac80102387f12f80c4828c8b4c7b1f9c48b772971507f520bcfbbd5640131cb128f258a36ed2862a38
SSDEEP 49152:nHWAyMsLI9IJ6a+H10dcb2muOH10dcb2m4Q:WpE9IxRhmuBhm4Q
TLSH
T131F5491376E94161F5F23AB45AB816619A7BBC606B39D68F128C058E4FB7EC0CD30763
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-09_d1dc9703a66b1344203f37f5bcdcf0eb_amadey_coinminer_elex_floxif_smoke-loader
- Size 3.3MB
- SHA256 b5e507f8edc4e82285f360abf3d2221f19341279417d11a901b6c5b4bf00934f
- MD5 d1dc9703a66b1344203f37f5bcdcf0eb
- SHA1 fc95298eec444e58e84908401f38f7c76fca6143
- SHA512 c524110f2db3c1dff70206aace1332bf82b764aa8d76c1ac80102387f12f80c4828c8b4c7b1f9c48b772971507f520bcfbbd5640131cb128f258a36ed2862a38
- SSDEEP 49152:nHWAyMsLI9IJ6a+H10dcb2muOH10dcb2m4Q:WpE9IxRhmuBhm4Q
- TLSH
  T131F5491376E94161F5F23AB45AB816619A7BBC606B39D68F128C058E4FB7EC0CD30763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor bootkit discovery floxif persistence privilege_escalation trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2