General
- Target GTKSetup-en.exe
- Size 1.1MB
- Sample260730-djkddsah36
- SHA256 94a902e2cc63b32a80d7e822821775a7484e0dd518a3fcd3c1531346c723cf17
Score
10/10
Malware Config
Targets
-
- Target GTKSetup-en.exe
- Size 1.1MB
- SHA256 94a902e2cc63b32a80d7e822821775a7484e0dd518a3fcd3c1531346c723cf17
Score10/10-
Family: FFDroider
Stealer targeting social media platform users first seen in April 2022.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target out.upx
- Size 3.0MB
- SHA256 d620229c926730efa6a46bfdb796874646b4c41e3a95f3055d17f3f9f1b60024
Score1/10
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1