General

  • Target

    md2_2efs.exe

  • Size

    1.4MB

  • Sample

    240713-3cn6fasgqa

  • MD5

    ffceece2e297cf5769a35bf387c310ef

  • SHA1

    2758f2f99b2b741e4c85d0808952cf1c0ca13be7

  • SHA256

    708542577a656b24962e07bfb4b958a57a7e916475bd99beaed79f91c71504f3

  • SHA512

    ecd0de3eb036d6fe62a08b84dd16a533ab3f0310877d17e998be9fa5c503ce647f9a0db8fe7d44caef298a92681ffc8ded7818a88fe0c67ef2d879f8a53fcb5f

  • SSDEEP

    24576:ZEl3CiZjrmmDzA+uWtcqa4J1Fy529Esn9bsO4nTb3sKnhrwvQYV:GD2mQWcqnbsjf39hrwvQYV

Malware Config

Targets

    • Target

      md2_2efs.exe

    • Size

      1.4MB

    • MD5

      ffceece2e297cf5769a35bf387c310ef

    • SHA1

      2758f2f99b2b741e4c85d0808952cf1c0ca13be7

    • SHA256

      708542577a656b24962e07bfb4b958a57a7e916475bd99beaed79f91c71504f3

    • SHA512

      ecd0de3eb036d6fe62a08b84dd16a533ab3f0310877d17e998be9fa5c503ce647f9a0db8fe7d44caef298a92681ffc8ded7818a88fe0c67ef2d879f8a53fcb5f

    • SSDEEP

      24576:ZEl3CiZjrmmDzA+uWtcqa4J1Fy529Esn9bsO4nTb3sKnhrwvQYV:GD2mQWcqnbsjf39hrwvQYV

    • FFDroider

      Stealer targeting social media platform users first seen in April 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks