Overview

overview

10

Static

static

3

135cde4f3f...18.exe

windows7-x64

10

135cde4f3f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    135cde4f3fdb52b79380a7e7da9f0c30_JaffaCakes118

  • Size

    2.1MB

  • Sample

    240329-adk6ysch26

  • MD5

    135cde4f3fdb52b79380a7e7da9f0c30

  • SHA1

    3b35b1dc8d7270d580d7b9fa66111cb210065809

  • SHA256

    a78990736434e16feb2a1ce666f36862431161f4821be9112a4608eedcca87d2

  • SHA512

    058a4d3a475f3f862ee07b4df5d3d378f834b444e98036438ea56a640b76857eb56d21008839d91f5b8b1e4f79cbb5f385b145f717725954ed58e7073c4445c7

  • SSDEEP

    49152:NRFA0Ak/INTT5bOIR23xwQ2h3uLlID22zOZEn:NRq0AkQNTZOCgwlupIDzzOZg

Score
10/10
ffdroiderevasionspywarestealertrojan

Malware Config

Extracted

Family

ffdroider

C2

http://186.2.171.3

Targets

    • Target

      135cde4f3fdb52b79380a7e7da9f0c30_JaffaCakes118

    • Size

      2.1MB

    • MD5

      135cde4f3fdb52b79380a7e7da9f0c30

    • SHA1

      3b35b1dc8d7270d580d7b9fa66111cb210065809

    • SHA256

      a78990736434e16feb2a1ce666f36862431161f4821be9112a4608eedcca87d2

    • SHA512

      058a4d3a475f3f862ee07b4df5d3d378f834b444e98036438ea56a640b76857eb56d21008839d91f5b8b1e4f79cbb5f385b145f717725954ed58e7073c4445c7

    • SSDEEP

      49152:NRFA0Ak/INTT5bOIR23xwQ2h3uLlID22zOZEn:NRq0AkQNTZOCgwlupIDzzOZg

    Score
    10/10
    ffdroiderspywarestealerevasiontrojan

    • FFDroider

      Stealer targeting social media platform users first seen in April 2022.

      stealerffdroider

    • FFDroider payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks