floxif | 024c40e528b92726de60c8c9dc64a27eeab1966a0b091ae4935d08ca155c0571

General

Target
2026-08-19_335d6eea579e5d28cd7660e53d71fb33_amadey_elex_floxif_remcos_smoke-loader_stop
Size 666KB
Sample260820-cacfraz1cy
SHA256 024c40e528b92726de60c8c9dc64a27eeab1966a0b091ae4935d08ca155c0571
MD5 335d6eea579e5d28cd7660e53d71fb33
SHA1 1f2da7d1980ab30b05fe463bc345dae8dfffb72c
SHA512 48405bc94cda5f46c9cb02c83fa2e43c39e75abf478fbc51695550674cf94bd51cc895c7b0ff364abc2dcebfeb4adc9bd17d79a6c52c1ae2a8faedf5d3bebac3
SSDEEP 12288:7JOTEwmh+WLSjLoC/gwK7Yemikm97dyH+0RiWCZ2SYY66BjvrEH7bP/:7JOQwmhz0HnK0emikm9Zye0gZHYY6Mr+
TLSH
T113E4AE41B28282FEC5C7257014AB7B3AF665952D17264DC3A7A03AF9CF20FF06D3A165
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-19_335d6eea579e5d28cd7660e53d71fb33_amadey_elex_floxif_remcos_smoke-loader_stop
- Size 666KB
- SHA256 024c40e528b92726de60c8c9dc64a27eeab1966a0b091ae4935d08ca155c0571
- MD5 335d6eea579e5d28cd7660e53d71fb33
- SHA1 1f2da7d1980ab30b05fe463bc345dae8dfffb72c
- SHA512 48405bc94cda5f46c9cb02c83fa2e43c39e75abf478fbc51695550674cf94bd51cc895c7b0ff364abc2dcebfeb4adc9bd17d79a6c52c1ae2a8faedf5d3bebac3
- SSDEEP 12288:7JOTEwmh+WLSjLoC/gwK7Yemikm97dyH+0RiWCZ2SYY66BjvrEH7bP/:7JOQwmhz0HnK0emikm9Zye0gZHYY6Mr+
- TLSH
  T113E4AE41B28282FEC5C7257014AB7B3AF665952D17264DC3A7A03AF9CF20FF06D3A165
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor defense_evasion discovery floxif persistence privilege_escalation trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2