General

  • Target

    0f1619d2878b47decac0eb4f25fae469623b3e41ae8564e7061ca464e95707ad

  • Size

    2.1MB

  • Sample

    220604-vad9fsbfgq

  • MD5

    011eca360bcae358ca1ebf28d2cfb0cc

  • SHA1

    95a9e2b240dfafc760b9c84e20c53d89632761c1

  • SHA256

    0f1619d2878b47decac0eb4f25fae469623b3e41ae8564e7061ca464e95707ad

  • SHA512

    46d6aa457c9a328ce0206348d43244685be06da27ad58c36810417526308a8bb77f608f8c3781018dd8b43e944f65c625166f672e0d3c6a98b2c7356ca3acd80

Malware Config

Targets

    • Target

      0f1619d2878b47decac0eb4f25fae469623b3e41ae8564e7061ca464e95707ad

    • Size

      2.1MB

    • MD5

      011eca360bcae358ca1ebf28d2cfb0cc

    • SHA1

      95a9e2b240dfafc760b9c84e20c53d89632761c1

    • SHA256

      0f1619d2878b47decac0eb4f25fae469623b3e41ae8564e7061ca464e95707ad

    • SHA512

      46d6aa457c9a328ce0206348d43244685be06da27ad58c36810417526308a8bb77f608f8c3781018dd8b43e944f65c625166f672e0d3c6a98b2c7356ca3acd80

    • FFDroider

      Stealer targeting social media platform users first seen in April 2022.

    • FFDroider Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks