floxif | 07f40c091d1337f6cb4b4e48a92978dc4b4516be845f0bd8a72238ec8898e092

General

Target
2026-08-19_28e6fbbc6e3616824a53bb39e786c1b7_elex_floxif_frostygoop_ghostlocker_hive_salatstealer_sliver_snatch
Size 3.6MB
Sample260819-zb1lasshkd
SHA256 07f40c091d1337f6cb4b4e48a92978dc4b4516be845f0bd8a72238ec8898e092
MD5 28e6fbbc6e3616824a53bb39e786c1b7
SHA1 2569f59164ede8669723d678b30c26fcbbd80088
SHA512 1ce3f44fee172083dbaedb0ac0ae999f108b6d21623b1c95ac5a70c66b100394b7c932597b34202a26449b5a8ad0213666b1739cb61505d8dcc84ad6dc79578e
SSDEEP 49152:VRs2g1IKqvQtRWme4s5LVc/fp18n5Igsxjq2iOIr+3r4ArUZb:zs2/pyEme4fOTwq2iOLkQmb
TLSH
T11B065A01FA9785F6E902163194EB336F27285D091F36DB87EA107B7EEC372D60936249
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-19_28e6fbbc6e3616824a53bb39e786c1b7_elex_floxif_frostygoop_ghostlocker_hive_salatstealer_sliver_snatch
- Size 3.6MB
- SHA256 07f40c091d1337f6cb4b4e48a92978dc4b4516be845f0bd8a72238ec8898e092
- MD5 28e6fbbc6e3616824a53bb39e786c1b7
- SHA1 2569f59164ede8669723d678b30c26fcbbd80088
- SHA512 1ce3f44fee172083dbaedb0ac0ae999f108b6d21623b1c95ac5a70c66b100394b7c932597b34202a26449b5a8ad0213666b1739cb61505d8dcc84ad6dc79578e
- SSDEEP 49152:VRs2g1IKqvQtRWme4s5LVc/fp18n5Igsxjq2iOIr+3r4ArUZb:zs2/pyEme4fOTwq2iOLkQmb
- TLSH
  T11B065A01FA9785F6E902163194EB336F27285D091F36DB87EA107B7EEC372D60936249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif persistence privilege_escalation trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2