General

  • Target

    7e0afbcc7487f74ef4d2dc400812b48542b95dfecad63fe356231065fa10a3db

  • Size

    487KB

  • Sample

    221130-qhta5adb73

  • MD5

    cc9720fe2882a3f7cc54f0f9afb1f335

  • SHA1

    aea59caec4ed3bfbbee2b8cd94c516ae45848a69

  • SHA256

    7e0afbcc7487f74ef4d2dc400812b48542b95dfecad63fe356231065fa10a3db

  • SHA512

    c310106ae8e37c7b85e9355b0852fe87ee73f03cbd23d68c7ac236a2548bb46b7b4a20dfcc973ee836ac415f1dedef5c53a4ade365e90be0dc7e11ef7641e1fa

  • SSDEEP

    12288:xNgW6anyJNH+RCBRITavKrn7xcCCKAUQXWfWv1K6lghoS:zWJNeRReSlcCAUQmQng

Malware Config

Extracted

Family

ffdroider

C2

http://101.36.107.74

Targets

    • Target

      7e0afbcc7487f74ef4d2dc400812b48542b95dfecad63fe356231065fa10a3db

    • Size

      487KB

    • MD5

      cc9720fe2882a3f7cc54f0f9afb1f335

    • SHA1

      aea59caec4ed3bfbbee2b8cd94c516ae45848a69

    • SHA256

      7e0afbcc7487f74ef4d2dc400812b48542b95dfecad63fe356231065fa10a3db

    • SHA512

      c310106ae8e37c7b85e9355b0852fe87ee73f03cbd23d68c7ac236a2548bb46b7b4a20dfcc973ee836ac415f1dedef5c53a4ade365e90be0dc7e11ef7641e1fa

    • SSDEEP

      12288:xNgW6anyJNH+RCBRITavKrn7xcCCKAUQXWfWv1K6lghoS:zWJNeRReSlcCAUQmQng

    • FFDroider

      Stealer targeting social media platform users first seen in April 2022.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks