Overview

overview

10

Static

static

8

22221d5e43...45.exe

windows7_x64

8

22221d5e43...45.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22221d5e43e091a1c03113d1bb37d8dd95dcf07d8756c87d2df6c0d1ab944845

  • Size

    804KB

  • Sample

    220612-g1hgxaheep

  • MD5

    afd33b39cc87ff4d2e7047e199b911f0

  • SHA1

    71adba01096df16f501b202b07d24d5c3fee37df

  • SHA256

    22221d5e43e091a1c03113d1bb37d8dd95dcf07d8756c87d2df6c0d1ab944845

  • SHA512

    9802fdf92b9735740bf23b943fd9fa15c374d09a2a13c90823a96654cc0a3fd157148b9600153d66721ee57023227339c30bab4cc7780737cd8a0a9844be3671

Score
10/10
ffdroiderevasionspywarestealertrojanvmprotect

Malware Config

Targets

    • Target

      22221d5e43e091a1c03113d1bb37d8dd95dcf07d8756c87d2df6c0d1ab944845

    • Size

      804KB

    • MD5

      afd33b39cc87ff4d2e7047e199b911f0

    • SHA1

      71adba01096df16f501b202b07d24d5c3fee37df

    • SHA256

      22221d5e43e091a1c03113d1bb37d8dd95dcf07d8756c87d2df6c0d1ab944845

    • SHA512

      9802fdf92b9735740bf23b943fd9fa15c374d09a2a13c90823a96654cc0a3fd157148b9600153d66721ee57023227339c30bab4cc7780737cd8a0a9844be3671

    Score
    10/10
    vmprotectffdroiderevasionspywarestealertrojan

    • FFDroider

      Stealer targeting social media platform users first seen in April 2022.

      stealerffdroider

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks