floxif | 1080ac7369bc12177343c9bc04ab9f74e923eb9e9af03c1ea6aaba4339cbd571

General

Target
2026-08-09_309763789199bba77c34a6bd080325fb_amadey_elex_floxif_manuscrypt_rhadamanthys_smoke-loader_stop
Size 39.7MB
Sample260809-gd1d7sgh93
SHA256 1080ac7369bc12177343c9bc04ab9f74e923eb9e9af03c1ea6aaba4339cbd571
MD5 309763789199bba77c34a6bd080325fb
SHA1 c97dd5aec1b0a068c5ddb37f3aaf3ed5768f31e0
SHA512 6ba7eccd620af8639be1be1bd1ef121b4dc5a30f98b49a5c1dc1beac2679b02ec2f8469077ae3fee3e7c70874bf5c7bcf5806466a4ceb371dc441bc047fa0cf4
SSDEEP 786432:ZCnoOq3xSZpPnJyxUHE0s/4s+rpVQr8Rez7SM4HoKyPByRTf/EWSW:cnojhSDfJ1ygTQr83MAoK5RTUWSW
TLSH
T12B97331291F007FCF821C579B196621E737A24AF06FD425BD79C4DF82F219E2A4BA153
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-09_309763789199bba77c34a6bd080325fb_amadey_elex_floxif_manuscrypt_rhadamanthys_smoke-loader_stop
- Size 39.7MB
- SHA256 1080ac7369bc12177343c9bc04ab9f74e923eb9e9af03c1ea6aaba4339cbd571
- MD5 309763789199bba77c34a6bd080325fb
- SHA1 c97dd5aec1b0a068c5ddb37f3aaf3ed5768f31e0
- SHA512 6ba7eccd620af8639be1be1bd1ef121b4dc5a30f98b49a5c1dc1beac2679b02ec2f8469077ae3fee3e7c70874bf5c7bcf5806466a4ceb371dc441bc047fa0cf4
- SSDEEP 786432:ZCnoOq3xSZpPnJyxUHE0s/4s+rpVQr8Rez7SM4HoKyPByRTf/EWSW:cnojhSDfJ1ygTQr83MAoK5RTUWSW
- TLSH
  T12B97331291F007FCF821C579B196621E737A24AF06FD425BD79C4DF82F219E2A4BA153
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif persistence privilege_escalation trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2