Extracted

• • Target

    8e33397689414f30209a555b0ae1fe5c

  • Size

    891KB

  • MD5

    8e33397689414f30209a555b0ae1fe5c

  • SHA1

    b915a1cb575c181c01b11a0f6b8a5e00e946e9c3

  • SHA256

    45b8610362cb8b8948f0a3a193daaeca16a13798921573cd708450f478079976

  • SHA512

    f8bfab698890515c7df76d6147e423faacd0e6d58b9e5ba9b891b56c5b62e0d1798165d510fa22b9a453e80a7e9eb511418c00158126b89aacbd7c7a43873b84

  • SSDEEP

    12288:nqh8pVbGprmp9giopBtgyMzuoDAloRi5X3FGfwM0A2F37EhKuJ4IMpH:nmrTd4yMzuoDAMipQfAF3+/OL

  Score

  10^/10

  ffdroiderstealervmprotectevasionspywaretrojan

  • FFDroider

    Stealer targeting social media platform users first seen in April 2022.

    stealerffdroider

  • FFDroider payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2