Extracted

• • Target

    3c7117f96c0c2879798a78a32d5d34cc

  • Size

    955KB

  • MD5

    3c7117f96c0c2879798a78a32d5d34cc

  • SHA1

    197c7dea513f8cbb7ebc17610f247d774c234213

  • SHA256

    6e17c993f42fcc005867e0fd33f98cae32726571d18f6dd8b9b06cefb82de162

  • SHA512

    b89573ac6cbbe132c0c4bac009904cba6d5fda9b4d4eebe2d9552f2451acdd8b7b8e8dce663b26f6541c9c124eb5b9f468efd23b35a28047b0cb942f3a90c122

  • SSDEEP

    24576:w82jSDss1H+s9gbxBRlq9L1LSLf2cCYoe+bCV9A1XEh:w82jSY2MxqzGZCxGuEh

  Score

  10^/10

  ffdroiderstealervmprotectspyware

  • FFDroider

    Stealer targeting social media platform users first seen in April 2022.

    stealerffdroider

  • FFDroider payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  behavioral1behavioral2