General

  • Target

    04a40ba8eba39bcbb36f5406e1d77711d46a0fb759db46e7e06922d2f1245bcc

  • Size

    4.1MB

  • MD5

    6e5726c6a030712eb642c81c7fce36cf

  • SHA1

    dd5b8e3f6c82781420bcdb84022f9182f215e734

  • SHA256

    04a40ba8eba39bcbb36f5406e1d77711d46a0fb759db46e7e06922d2f1245bcc

  • SHA512

    e91ca9ce7bf57129f60e603a9d0de7ee2444c50e1f7177196243d816dedb04efa3845446674c99a4e689ff961d0afc9536c3680987332f2da845ab5d444ba1e4

  • SSDEEP

    98304:T5WIdmJwF4r2TTFk3r9pb7dUkNm5CPfQ1qQ2W4OiZrq1DfPHNADtV6v+sYJ:s4LXS3BdQ1qQZ4O7NADtV6v+VJ

Score
10/10

Malware Config

Extracted

Family

ffdroider

C2

http://152.32.228.19

Signatures

  • FFDroider payload 1 IoCs
  • Ffdroider family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 04a40ba8eba39bcbb36f5406e1d77711d46a0fb759db46e7e06922d2f1245bcc
    .exe windows:5 windows x86 arch:x86

    54e54f7bdb96eda1caeb7597ab9a2189


    Headers

    Imports

    Sections