floxif | 3afe27ce4af8ca6fb08a9cb3fec28af8275b78524c053ea58d065100c1c104af

General

Target
2026-08-17_7007cd6650fe54ff9da52e13e06f01ac_amadey_darkgate_elex_floxif_smoke-loader
Size 1.8MB
Sample260817-clxaasdm4y
SHA256 3afe27ce4af8ca6fb08a9cb3fec28af8275b78524c053ea58d065100c1c104af
MD5 7007cd6650fe54ff9da52e13e06f01ac
SHA1 3c91211a9bc3e8fa1df3c2303e29d7a0c637cbb9
SHA512 81fc7c6dbf4698f0cf073c28c6633fc0c173a2b45c8187556206af5b260d66ec9b3327ff82ba6e8bc84681962e0b5c88ffd4775acfbe9b4ad56225ef009393f8
SSDEEP 49152:Lwx/0ZFcw1jDzzBN3yilFs3r/APxPrqDme27GfBE0S+woq4SrByqJ83PsfwE:SLw1jDzzT3yilFs3rY5+Dme27G17wQSD
TLSH
T109958E213B5084BBC2333231550AA378F6BDA9304F76438766911F3D2E795939A6C7AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-17_7007cd6650fe54ff9da52e13e06f01ac_amadey_darkgate_elex_floxif_smoke-loader
- Size 1.8MB
- SHA256 3afe27ce4af8ca6fb08a9cb3fec28af8275b78524c053ea58d065100c1c104af
- MD5 7007cd6650fe54ff9da52e13e06f01ac
- SHA1 3c91211a9bc3e8fa1df3c2303e29d7a0c637cbb9
- SHA512 81fc7c6dbf4698f0cf073c28c6633fc0c173a2b45c8187556206af5b260d66ec9b3327ff82ba6e8bc84681962e0b5c88ffd4775acfbe9b4ad56225ef009393f8
- SSDEEP 49152:Lwx/0ZFcw1jDzzBN3yilFs3r/APxPrqDme27GfBE0S+woq4SrByqJ83PsfwE:SLw1jDzzT3yilFs3rY5+Dme27G17wQSD
- TLSH
  T109958E213B5084BBC2333231550AA378F6BDA9304F76438766911F3D2E795939A6C7AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif trojan upx persistence privilege_escalation
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2