floxif | 7ba74c3e2942f974311bc2f2efc032d9df179dfa1cb47dc1f5299a35afd6090a

General

Target
2026-08-10_2875b9d817fab930f547e62c2f18059d_amadey_avoslocker_cobalt-strike_elex_floxif_hellokitty_luca-stealer_lynx_njrat
Size 224KB
Sample260810-szk27asbpd
SHA256 7ba74c3e2942f974311bc2f2efc032d9df179dfa1cb47dc1f5299a35afd6090a
MD5 2875b9d817fab930f547e62c2f18059d
SHA1 0407839cac174dfec163aada79b622e793af355a
SHA512 4213a57aa5b624d75c23b2e97f03bf919eaaecdb80a917ffb1f2f5761f246a2eba38e479ba0bbc561006b7d02e5dbcc4f9073d82f5a3fb21629665b16556cd5f
SSDEEP 6144:ayN2zi7ajzPGLKZH2FaLw9hH4JdBV+UdvrEFp7hKgoy:ayN2zi+jzy9hH4JdBjvrEH7cy
TLSH
T1B424BF4079C0C3F6E4A228303578A7705DECFC3C0F665A9B974515799E3C9D2AA68F2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-10_2875b9d817fab930f547e62c2f18059d_amadey_avoslocker_cobalt-strike_elex_floxif_hellokitty_luca-stealer_lynx_njrat
- Size 224KB
- SHA256 7ba74c3e2942f974311bc2f2efc032d9df179dfa1cb47dc1f5299a35afd6090a
- MD5 2875b9d817fab930f547e62c2f18059d
- SHA1 0407839cac174dfec163aada79b622e793af355a
- SHA512 4213a57aa5b624d75c23b2e97f03bf919eaaecdb80a917ffb1f2f5761f246a2eba38e479ba0bbc561006b7d02e5dbcc4f9073d82f5a3fb21629665b16556cd5f
- SSDEEP 6144:ayN2zi7ajzPGLKZH2FaLw9hH4JdBV+UdvrEFp7hKgoy:ayN2zi+jzy9hH4JdBjvrEH7cy
- TLSH
  T1B424BF4079C0C3F6E4A228303578A7705DECFC3C0F665A9B974515799E3C9D2AA68F2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif trojan upx persistence privilege_escalation
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2