ffdroider | 305f0ad1b66a12f621f5a588dc414b1d8d449bd104e5b5e71054636f3a2644bd | Triage

Sharing

General

Target

305f0ad1b66a12f621f5a588dc414b1d8d449bd104e5b5e71054636f3a2644bd
Size

1.0MB
Sample

220621-esf8rsbcgn
MD5

ddbc5d6023b19a129a124f93233d5f4d
SHA1

b64a38b8dd4e8ed57a51e6f58a85b1eb5513a444
SHA256

305f0ad1b66a12f621f5a588dc414b1d8d449bd104e5b5e71054636f3a2644bd
SHA512

7db57c8b843dff5156aca236556a5e78d2e1a6c980dac96da54e3de9832a210d92a7ca8b89bd51e1038150bb306b4ff7b7f524ea696ae707101811a4ff644c30
SSDEEP

24576:YP/Yk2eQji0+pBKcx4Z/2/qFatBkN8osTIQC2Y8rao2b2f8t+avrhqqk0:cJ2eQjiJ2Z+yFgBo8rae8YazhG

Score

10^/10

ffdroider evasion spyware stealer trojan

Malware Config

Targets

- Target
  
  305f0ad1b66a12f621f5a588dc414b1d8d449bd104e5b5e71054636f3a2644bd
- Size
  
  1.0MB
- MD5
  
  ddbc5d6023b19a129a124f93233d5f4d
- SHA1
  
  b64a38b8dd4e8ed57a51e6f58a85b1eb5513a444
- SHA256
  
  305f0ad1b66a12f621f5a588dc414b1d8d449bd104e5b5e71054636f3a2644bd
- SHA512
  
  7db57c8b843dff5156aca236556a5e78d2e1a6c980dac96da54e3de9832a210d92a7ca8b89bd51e1038150bb306b4ff7b7f524ea696ae707101811a4ff644c30
- SSDEEP
  
  24576:YP/Yk2eQji0+pBKcx4Z/2/qFatBkN8osTIQC2Y8rao2b2f8t+avrhqqk0:cJ2eQjiJ2Z+yFgBo8rae8YazhG
Score

10^/10

ffdroider spyware stealer evasion trojan
- FFDroider
  Stealer targeting social media platform users first seen in April 2022.
  stealer ffdroider
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ffdroiderspywarestealer

behavioral2

ffdroiderevasionspywarestealertrojan