Extracted

• • Target

    file.exe

  • Size

    2.9MB

  • MD5

    e878e6121f88df7375c43775fa2bee97

  • SHA1

    21d056b5618af26858c8d5a69ea09eb95de22f9c

  • SHA256

    b200a3dc7f79701d7b09d3c0fcd99d086f5009053cb86fe6e0232373747ca236

  • SHA512

    a71e841d3d880c44c3865fcaf4084e515716a2a8cbd61ffbbf9a1b4db92b5069b786b239f35986a1f03dfc237530fcdf190da0223672b1db1dc98111a882da1a

  • SSDEEP

    49152:pdD1LN0ogT5Kyp4IMknbRGvjfuqFzF+DCnpNuDehql1cKE40c1jy9H/8xBv+M7kg:v7ihJxbRGvKqZF1npNuqIcKEHQjy9H/l

  Score

  10^/10

  ffdroiderpersistencespywarestealerevasiontrojan

  • FFDroider

    Stealer targeting social media platform users first seen in April 2022.

    stealerffdroider

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2