General

  • Target
    2025-12-18_5c480b9b6ee16832d25b54cc1c83f25d_coinminer_elex_glassworm_maze_stealc
  • Size 2.0MB
  • Sample251218-lsv59askes
  • SHA256 472eb658a4702eab3c579ddf1cafa16cb9e8594e352934af1ce4730cfd174281
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • ffdroider

C2
  • http://186.2.171.3

Targets

    • Target
      2025-12-18_5c480b9b6ee16832d25b54cc1c83f25d_coinminer_elex_glassworm_maze_stealc
    • Size 2.0MB
    • SHA256 472eb658a4702eab3c579ddf1cafa16cb9e8594e352934af1ce4730cfd174281
    • MD5 SHA1 SHA512 SSDEEP
    • FFDroider

      Stealer targeting social media platform users first seen in April 2022.

    • FFDroider payload

    • Ffdroider family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v16

Tasks