General

  • Target

    a69cfd4ebd3e783943be08d7ffe8e05a

  • Size

    1.4MB

  • Sample

    231222-qvg4macch2

  • MD5

    a69cfd4ebd3e783943be08d7ffe8e05a

  • SHA1

    cd5eff3cc79f6d3e3739acf4586e787865e3c855

  • SHA256

    2a0106cf867f44e349bdde8116342dbc8fe6c53c75a92328a36d79de5a08aa42

  • SHA512

    0daa916629a66df6ea2ea1422cedf80718b1f207495fc51f91b71266511dd80bc7f6f23695805965d8115627ed472304a6df8d3a0d32e374987a1a8350722ebc

  • SSDEEP

    24576:H8ARmK9XHkry2dvt1JpgPS8VrI+AMXqcjGEDZmGXivQ7TP4pMRR020SVFpFs4:3kK9XHkry2dV1sfJJAEVj17TwpQV0cFL

Malware Config

Extracted

Family

ffdroider

C2

http://101.36.107.74

Targets

    • Target

      a69cfd4ebd3e783943be08d7ffe8e05a

    • Size

      1.4MB

    • MD5

      a69cfd4ebd3e783943be08d7ffe8e05a

    • SHA1

      cd5eff3cc79f6d3e3739acf4586e787865e3c855

    • SHA256

      2a0106cf867f44e349bdde8116342dbc8fe6c53c75a92328a36d79de5a08aa42

    • SHA512

      0daa916629a66df6ea2ea1422cedf80718b1f207495fc51f91b71266511dd80bc7f6f23695805965d8115627ed472304a6df8d3a0d32e374987a1a8350722ebc

    • SSDEEP

      24576:H8ARmK9XHkry2dvt1JpgPS8VrI+AMXqcjGEDZmGXivQ7TP4pMRR020SVFpFs4:3kK9XHkry2dV1sfJJAEVj17TwpQV0cFL

    • FFDroider

      Stealer targeting social media platform users first seen in April 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks