floxif | e4277907d2af52635f1c3d32c3e0ffbc7c610616df762a960ec038812cf68dfa

General

Target
2026-11-03_ad241f9c327e604ac57f603fe9e41833_elex_floxif_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee
Size 262KB
Sample261104-m2bnmsdb49
SHA256 e4277907d2af52635f1c3d32c3e0ffbc7c610616df762a960ec038812cf68dfa
MD5 ad241f9c327e604ac57f603fe9e41833
SHA1 fcf756f45ba207e50bb7a3ee848035e8c8496c7e
SHA512 ac4301b310ab7968bb082189b51036483fb536eb79f40459ea83e50d9fd783e66aa02ceec71878f43b4c96b40e5c09fdd73b88441587611087461980e987dc25
SSDEEP 6144:2DXJl7VPi7gKUpX0Eb0eKGPDyBV+UdvrEFp7hKGxt:2DXJlRPi7FUpEEb0eKGWBjvrEH7Fj
TLSH
T10644BF107980C3F6D1513130B069ABB10BE8AC3E07EE70D7E7542D65BEAC6D256B936B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-11-03_ad241f9c327e604ac57f603fe9e41833_elex_floxif_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee
- Size 262KB
- SHA256 e4277907d2af52635f1c3d32c3e0ffbc7c610616df762a960ec038812cf68dfa
- MD5 ad241f9c327e604ac57f603fe9e41833
- SHA1 fcf756f45ba207e50bb7a3ee848035e8c8496c7e
- SHA512 ac4301b310ab7968bb082189b51036483fb536eb79f40459ea83e50d9fd783e66aa02ceec71878f43b4c96b40e5c09fdd73b88441587611087461980e987dc25
- SSDEEP 6144:2DXJl7VPi7gKUpX0Eb0eKGPDyBV+UdvrEFp7hKGxt:2DXJlRPi7FUpEEb0eKGWBjvrEH7Fj
- TLSH
  T10644BF107980C3F6D1513130B069ABB10BE8AC3E07EE70D7E7542D65BEAC6D256B936B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif trojan upx persistence privilege_escalation
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2