floxif | cc24bfac870ac135f03eb0d4760a51abb856240f64e462c2dfc0bf53ac7a84e2

General

Target
2026-08-18_fa6f0d94502a1a10a69c290a57fd6928_amadey_elex_emotet_floxif_smoke-loader_stop
Size 388KB
Sample260818-b3534atdng
SHA256 cc24bfac870ac135f03eb0d4760a51abb856240f64e462c2dfc0bf53ac7a84e2
MD5 fa6f0d94502a1a10a69c290a57fd6928
SHA1 a4fe564847f43e975f1118892fd61f4deae3b373
SHA512 47eebeabbf34c46d7920b358116379155753df175c615277c7b361c5bf0271845e4d13a62be63eb1d1818137a6c4e14fe81a66d303a30bf09222f2d1bb435125
SSDEEP 6144:XyOfMUZp9sTi3wzwtDVnaJDTppbC8CYrZQjUrR3mgaEP2OFBx60BV+UdvrEFp7h7:XdTs+3QJD1p+8CwSOuj0BjvrEH7/9
TLSH
T18B849E0177E0CBB5C1A315326E629B54A2F6FD395F36864763483B0DEE38641DB3932A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-18_fa6f0d94502a1a10a69c290a57fd6928_amadey_elex_emotet_floxif_smoke-loader_stop
- Size 388KB
- SHA256 cc24bfac870ac135f03eb0d4760a51abb856240f64e462c2dfc0bf53ac7a84e2
- MD5 fa6f0d94502a1a10a69c290a57fd6928
- SHA1 a4fe564847f43e975f1118892fd61f4deae3b373
- SHA512 47eebeabbf34c46d7920b358116379155753df175c615277c7b361c5bf0271845e4d13a62be63eb1d1818137a6c4e14fe81a66d303a30bf09222f2d1bb435125
- SSDEEP 6144:XyOfMUZp9sTi3wzwtDVnaJDTppbC8CYrZQjUrR3mgaEP2OFBx60BV+UdvrEFp7h7:XdTs+3QJD1p+8CwSOuj0BjvrEH7/9
- TLSH
  T18B849E0177E0CBB5C1A315326E629B54A2F6FD395F36864763483B0DEE38641DB3932A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif persistence privilege_escalation trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2