General

  • Target

    221d8a02846a751d54f6e936e54c9c342dea9cc8c5826b34f89a6c22d54549b4

  • Size

    5.7MB

  • Sample

    250201-vfberatkgk

  • MD5

    0dcb74fbd857046ab20d3b9faedf734d

  • SHA1

    d2a491228808434f18e6f067abd3ac5babbbfb3f

  • SHA256

    221d8a02846a751d54f6e936e54c9c342dea9cc8c5826b34f89a6c22d54549b4

  • SHA512

    ca9af7f88101b3f1182dee45229aef3f1c0e1506203f18ed3c8ea52342fc1aa33229cec1c79f93cc759b9bd03fe60783ed50b88c7d25a58eab340fd1eaa0a215

  • SSDEEP

    98304:x3i4L60RMUanK2+zH0mqw/iOtU5bGZvQ/qpyr0kVvXot6JQNSvI+iZ7q1zPPXNAo:/wqwXot6JQaI+7NAjtVa/uA

Malware Config

Extracted

Family

ffdroider

C2

http://186.2.171.3

Targets

    • Target

      221d8a02846a751d54f6e936e54c9c342dea9cc8c5826b34f89a6c22d54549b4

    • Size

      5.7MB

    • MD5

      0dcb74fbd857046ab20d3b9faedf734d

    • SHA1

      d2a491228808434f18e6f067abd3ac5babbbfb3f

    • SHA256

      221d8a02846a751d54f6e936e54c9c342dea9cc8c5826b34f89a6c22d54549b4

    • SHA512

      ca9af7f88101b3f1182dee45229aef3f1c0e1506203f18ed3c8ea52342fc1aa33229cec1c79f93cc759b9bd03fe60783ed50b88c7d25a58eab340fd1eaa0a215

    • SSDEEP

      98304:x3i4L60RMUanK2+zH0mqw/iOtU5bGZvQ/qpyr0kVvXot6JQNSvI+iZ7q1zPPXNAo:/wqwXot6JQaI+7NAjtVa/uA

    • FFDroider

      Stealer targeting social media platform users first seen in April 2022.

    • FFDroider payload

    • Ffdroider family

MITRE ATT&CK Enterprise v15

Tasks