floxif | 6172c68f508aff495bf9ef973746b5718847e18ba793faf1bba69e27c79bc83d

General

Target
2026-09-26_35b89802bb4848c8c47d68eca09169fa_amadey_avoslocker_elex_floxif_glassworm_luca-stealer_lynx_njrat
Size 8.4MB
Sample260927-wpd3nstx2j
SHA256 6172c68f508aff495bf9ef973746b5718847e18ba793faf1bba69e27c79bc83d
MD5 35b89802bb4848c8c47d68eca09169fa
SHA1 5066212b33dfbbf4c8f8817c326f4370e4588141
SHA512 3cd65ed7de79f663ebf32de707a527f9a277ee21b5a3fd2aca3cb58810ebf7cec9038481afac85c0355e52d5e5dddf5e3b022c679181056f2441c873c8ecbf48
SSDEEP 98304:Tgzjwfi0lZYemmNbPihwcQJHqSg4sCDKWTv2IlG0Akb18U95YF4h3jd0dcbEAEik:8fwfnuw1XX2Iltb6Uke3GdcbE8k
TLSH
T18496F1415222D3A0C891E67A92D8BF3718A83A3D5BCD7CC396F01C596C70BD25E3AD5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-26_35b89802bb4848c8c47d68eca09169fa_amadey_avoslocker_elex_floxif_glassworm_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 6172c68f508aff495bf9ef973746b5718847e18ba793faf1bba69e27c79bc83d
- MD5 35b89802bb4848c8c47d68eca09169fa
- SHA1 5066212b33dfbbf4c8f8817c326f4370e4588141
- SHA512 3cd65ed7de79f663ebf32de707a527f9a277ee21b5a3fd2aca3cb58810ebf7cec9038481afac85c0355e52d5e5dddf5e3b022c679181056f2441c873c8ecbf48
- SSDEEP 98304:Tgzjwfi0lZYemmNbPihwcQJHqSg4sCDKWTv2IlG0Akb18U95YF4h3jd0dcbEAEik:8fwfnuw1XX2Iltb6Uke3GdcbE8k
- TLSH
  T18496F1415222D3A0C891E67A92D8BF3718A83A3D5BCD7CC396F01C596C70BD25E3AD5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif persistence privilege_escalation trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Executes dropped EXE
- Loads dropped DLL
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2