floxif | 85fe115c635c945633ffb8293b72597f4ff4860c582d0755d3640317a9f0ae93

General

Target
2026-08-09_02aff9aa4595705d1b491d962eb0a82d_amadey_cobalt-strike_elex_floxif_luca-stealer_lynx_njrat
Size 440KB
Sample260809-gl5c5avycy
SHA256 85fe115c635c945633ffb8293b72597f4ff4860c582d0755d3640317a9f0ae93
MD5 02aff9aa4595705d1b491d962eb0a82d
SHA1 3005d38ceb4bce0045cb7338ad5b5629c8f4e9e2
SHA512 d62000ff7491a0bbae94c2872b3450a19bebf1b48cd2bceead8fb7bd012ecbde5a905d7dbf0a00c459c60a25442f3d60e7045fb22803664546725d2f864b1bfb
SSDEEP 12288:2/J+CtaxnjZpAbxdxDcWcnR4bfXfwiSeiUbHgbYpj08NO0qwxeWfF02/S0lqJqcp:+el3l10DvfeUYqcZQCGm4YprEH7lk
TLSH
T1F9A49D00F840E2B6D0510570F6A49AF348BCAD799B1954C7F3D07DBA7A389E1A73DB1A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-09_02aff9aa4595705d1b491d962eb0a82d_amadey_cobalt-strike_elex_floxif_luca-stealer_lynx_njrat
- Size 440KB
- SHA256 85fe115c635c945633ffb8293b72597f4ff4860c582d0755d3640317a9f0ae93
- MD5 02aff9aa4595705d1b491d962eb0a82d
- SHA1 3005d38ceb4bce0045cb7338ad5b5629c8f4e9e2
- SHA512 d62000ff7491a0bbae94c2872b3450a19bebf1b48cd2bceead8fb7bd012ecbde5a905d7dbf0a00c459c60a25442f3d60e7045fb22803664546725d2f864b1bfb
- SSDEEP 12288:2/J+CtaxnjZpAbxdxDcWcnR4bfXfwiSeiUbHgbYpj08NO0qwxeWfF02/S0lqJqcp:+el3l10DvfeUYqcZQCGm4YprEH7lk
- TLSH
  T1F9A49D00F840E2B6D0510570F6A49AF348BCAD799B1954C7F3D07DBA7A389E1A73DB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif persistence privilege_escalation trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2