floxif | 46454381b1df6ef37475dad5569ac5830ba8ddc98b61a8084b4f94723df5e625

General

Target
46454381b1df6ef37475dad5569ac5830ba8ddc98b61a8084b4f94723df5e625
Size 218KB
Sample261027-e7adrsav8v
SHA256 46454381b1df6ef37475dad5569ac5830ba8ddc98b61a8084b4f94723df5e625
MD5 cefac98d98e746b6bbc830edeb2f208c
SHA1 a7355dd21a37465e9a49a385dbb67df29b6204a4
SHA512 9e66ce154f7e767f0bd9bc54c28c7f96e02c4bc49202b2e425ebdba16cace4cfe11419f43b8e6c1659e192d9960ec520d9b7df5759377d58b90b2179e2f6b4fa
SSDEEP 6144:aFMllOJTbaDhZJ7SWr3uGsQvMRlkM4RD/qzMfUQ:h7OJTbuBn3u8MRGM4h/qofV
TLSH
T16124CF01B150C3FAD47E18383074D7615BEAB83CCA9969CBE35446659E3C6C29E78E2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  46454381b1df6ef37475dad5569ac5830ba8ddc98b61a8084b4f94723df5e625
- Size 218KB
- SHA256 46454381b1df6ef37475dad5569ac5830ba8ddc98b61a8084b4f94723df5e625
- MD5 cefac98d98e746b6bbc830edeb2f208c
- SHA1 a7355dd21a37465e9a49a385dbb67df29b6204a4
- SHA512 9e66ce154f7e767f0bd9bc54c28c7f96e02c4bc49202b2e425ebdba16cace4cfe11419f43b8e6c1659e192d9960ec520d9b7df5759377d58b90b2179e2f6b4fa
- SSDEEP 6144:aFMllOJTbaDhZJ7SWr3uGsQvMRlkM4RD/qzMfUQ:h7OJTbuBn3u8MRGM4h/qofV
- TLSH
  T16124CF01B150C3FAD47E18383074D7615BEAB83CCA9969CBE35446659E3C6C29E78E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor defense_evasion discovery floxif trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

1

T1006

Credential Access

Discovery

Network Service Discovery

1

T1046

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Floxif, Floodfix

Detects Floxif payload

ACProtect 1.3x - 1.4x DLL software

Loads dropped DLL

Network Service Discovery

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2