floxif | c8ce3d1b5d2359bdf277aea30512aae4af36cd9e18acb2355e440e6abce0472c

General

Target
2026-08-10_15f51e488393f186d7021a7010c61c7b_amadey_elex_floxif_redline-stealer_rhadamanthys_smoke-loader_stop
Size 625KB
Sample260810-s2nk4acl4w
SHA256 c8ce3d1b5d2359bdf277aea30512aae4af36cd9e18acb2355e440e6abce0472c
MD5 15f51e488393f186d7021a7010c61c7b
SHA1 769ef51455f63bc1f0dfa2a9b717a62ad16541bd
SHA512 298d984515a0998e0783a6a42b6109fa3c3bd1dcccbd10b2d0c34e7ad55bcee574ffdce161637a99c52ec92cd39e50d0f3f08af9a77bd1865fe04e3146486fa2
SSDEEP 12288:VpNWz8beH2TmTmbA4yrRGsR5HW5lcwFhpto/cT9aRzSyBjvrEH71V:VpClmbANrr5eiwFhDoET9t0rEH71V
TLSH
T154D48E307EF48235D4A351B4666D622151F9FC741B3A80CBB38443EEAA74BC29B35B67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-10_15f51e488393f186d7021a7010c61c7b_amadey_elex_floxif_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 625KB
- SHA256 c8ce3d1b5d2359bdf277aea30512aae4af36cd9e18acb2355e440e6abce0472c
- MD5 15f51e488393f186d7021a7010c61c7b
- SHA1 769ef51455f63bc1f0dfa2a9b717a62ad16541bd
- SHA512 298d984515a0998e0783a6a42b6109fa3c3bd1dcccbd10b2d0c34e7ad55bcee574ffdce161637a99c52ec92cd39e50d0f3f08af9a77bd1865fe04e3146486fa2
- SSDEEP 12288:VpNWz8beH2TmTmbA4yrRGsR5HW5lcwFhpto/cT9aRzSyBjvrEH71V:VpClmbANrr5eiwFhDoET9t0rEH71V
- TLSH
  T154D48E307EF48235D4A351B4666D622151F9FC741B3A80CBB38443EEAA74BC29B35B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif trojan upx persistence privilege_escalation
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2