General

  • Target
    3596982adf10806e7128f8f64621ec7546f4c56e445010523a1a5a584254f786.bin
  • Size 1.9MB
  • Sample220730-ebadwsgddm
  • SHA256 3596982adf10806e7128f8f64621ec7546f4c56e445010523a1a5a584254f786
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • ffdroider

C2
  • http://152.32.228.19

Targets

    • Target
      3596982adf10806e7128f8f64621ec7546f4c56e445010523a1a5a584254f786.bin
    • Size 1.9MB
    • SHA256 3596982adf10806e7128f8f64621ec7546f4c56e445010523a1a5a584254f786
    • MD5 SHA1 SHA512 SSDEEP
    • FFDroider

      Stealer targeting social media platform users first seen in April 2022.

    • FFDroider payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks