floxif | ad6ad48a8ee8266a6faa25c604ff5d03c0d319c39367bbd6ee0777e89b823986

General

Target
2026-08-24_dce5cdafa6576fe2364c9b6bff357f3f_amadey_coinminer_elex_emotet_floxif_smoke-loader_stop
Size 9.8MB
Sample260824-2q874adj5v
SHA256 ad6ad48a8ee8266a6faa25c604ff5d03c0d319c39367bbd6ee0777e89b823986
MD5 dce5cdafa6576fe2364c9b6bff357f3f
SHA1 90a26c709eeb2a69d682d3ed525568e839baba41
SHA512 8b7d0f804a823332829304cf024e1caf578e1b25206e97558d7a00a566ac2e0aa2e36f27b7c29d1803efa4b97e3b003fbd3b2dd6164853b3b1fdd769de8c5d60
SSDEEP 98304:E3/3zXFbl5qCv27kEYWKfIfqeow+x19gm+0g2HDE3EjErToZ7Gme8Ninb:Aj5nqzIE3619r+7kuvrT3cNib
TLSH
T170A6CF00FBD6C2F5D782157624BE772A5261B6A417249BC3F3B42E3E9A322D17C36349
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-24_dce5cdafa6576fe2364c9b6bff357f3f_amadey_coinminer_elex_emotet_floxif_smoke-loader_stop
- Size 9.8MB
- SHA256 ad6ad48a8ee8266a6faa25c604ff5d03c0d319c39367bbd6ee0777e89b823986
- MD5 dce5cdafa6576fe2364c9b6bff357f3f
- SHA1 90a26c709eeb2a69d682d3ed525568e839baba41
- SHA512 8b7d0f804a823332829304cf024e1caf578e1b25206e97558d7a00a566ac2e0aa2e36f27b7c29d1803efa4b97e3b003fbd3b2dd6164853b3b1fdd769de8c5d60
- SSDEEP 98304:E3/3zXFbl5qCv27kEYWKfIfqeow+x19gm+0g2HDE3EjErToZ7Gme8Ninb:Aj5nqzIE3619r+7kuvrT3cNib
- TLSH
  T170A6CF00FBD6C2F5D782157624BE772A5261B6A417249BC3F3B42E3E9A322D17C36349
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif persistence privilege_escalation trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2