floxif | 10ebf3d049b62ec3b1de9ade9bb924f0b809e71769d4eefafbfcf55c777fe07e

General

Target
2026-09-16_335939cb66aee82715df1d463685a444_elex_floxif_hijackloader_maze_rhadamanthys_smoke-loader_stop
Size 305KB
Sample260916-2plemsgl5v
SHA256 10ebf3d049b62ec3b1de9ade9bb924f0b809e71769d4eefafbfcf55c777fe07e
MD5 335939cb66aee82715df1d463685a444
SHA1 529d2903a0f9af9090d13c6db6eea353ead6b49c
SHA512 aad66a0d4c2bd83277fd84dd8eb152061657de0dc6084dea5eb9f5a8e9c0b0960f3293c1cfc5c76d9b1b53fc39e2ea1601440308df7b90dc4492f2c093b37b02
SSDEEP 3072:1N2GmZKPgMdgubh/ep+ThZoS0JCGd12z7mF2lQBV+UdE+rECWp7hKbX:D2GiK5bxepU7GmGBV+UdvrEFp7hKz
TLSH
T143646A1131C087F4D476013324AB9A2D36B9FD3D4F6A468BB398BADD0A7CDD25738662
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-16_335939cb66aee82715df1d463685a444_elex_floxif_hijackloader_maze_rhadamanthys_smoke-loader_stop
- Size 305KB
- SHA256 10ebf3d049b62ec3b1de9ade9bb924f0b809e71769d4eefafbfcf55c777fe07e
- MD5 335939cb66aee82715df1d463685a444
- SHA1 529d2903a0f9af9090d13c6db6eea353ead6b49c
- SHA512 aad66a0d4c2bd83277fd84dd8eb152061657de0dc6084dea5eb9f5a8e9c0b0960f3293c1cfc5c76d9b1b53fc39e2ea1601440308df7b90dc4492f2c093b37b02
- SSDEEP 3072:1N2GmZKPgMdgubh/ep+ThZoS0JCGd12z7mF2lQBV+UdE+rECWp7hKbX:D2GiK5bxepU7GmGBV+UdvrEFp7hKz
- TLSH
  T143646A1131C087F4D476013324AB9A2D36B9FD3D4F6A468BB398BADD0A7CDD25738662
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif trojan upx persistence privilege_escalation
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2