floxif | 40067367d1bb9a50b1a1ebbef74714353122f479ed6f7222ea011700f32a30de

General

Target
2026-11-05_725850c5d3c37d00e8b5603dc1f93668_amadey_elex_floxif_smoke-loader_stop
Size 4.7MB
Sample261106-y6m31sda49
SHA256 40067367d1bb9a50b1a1ebbef74714353122f479ed6f7222ea011700f32a30de
MD5 725850c5d3c37d00e8b5603dc1f93668
SHA1 53365a0c22f4287d77368328015106578313d128
SHA512 f47bfbb17b14dc04573b7092b2415ba3c04a9d9273304a649772b9029430f809df9b7638dbae9b04d9dcadd98d5358ca7a6387d56411a697c54634ce6cb3d344
SSDEEP 98304:u0dPlpKnpVhil+Pd/GNUvx7uHw6dSXXahK9aZQ+3QuNR6RbXx7vI9P+:umpWpVhVvEtdSXXahKMZQ+3QuNR6h9KW
TLSH
T11D369D81FAC5C1B2C512097001BAF62987319F496722D2D3F4D83FAA5F33AD1957B98E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-11-05_725850c5d3c37d00e8b5603dc1f93668_amadey_elex_floxif_smoke-loader_stop
- Size 4.7MB
- SHA256 40067367d1bb9a50b1a1ebbef74714353122f479ed6f7222ea011700f32a30de
- MD5 725850c5d3c37d00e8b5603dc1f93668
- SHA1 53365a0c22f4287d77368328015106578313d128
- SHA512 f47bfbb17b14dc04573b7092b2415ba3c04a9d9273304a649772b9029430f809df9b7638dbae9b04d9dcadd98d5358ca7a6387d56411a697c54634ce6cb3d344
- SSDEEP 98304:u0dPlpKnpVhil+Pd/GNUvx7uHw6dSXXahK9aZQ+3QuNR6RbXx7vI9P+:umpWpVhVvEtdSXXahKMZQ+3QuNR6h9KW
- TLSH
  T11D369D81FAC5C1B2C512097001BAF62987319F496722D2D3F4D83FAA5F33AD1957B98E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor discovery floxif persistence privilege_escalation trojan upx
- Family: Floxif, Floodfix
  Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
  backdoor trojan floxif
- Detects Floxif payload
  backdoor
- Custom signature
  
  UPX dump on OEP (original entry point)
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2