Top Tweets for #FDMTP
Earlier this week, @malwrhunterteam reported several unknown samples. Our code similarity engine attributes them to the #FDMTP hacktool, originally reported by @TrendMicro last year. This hacktool is a simple downloader used by the Chinese #APT group #EarthPreta (#MustangPanda).
We retrohunted for this downloader and uncovered additional recent samples. We also extracted the embedded configuration, which is stored in an encrypted format (Base64 + DES).
π§¬#IOCs:
5c0fc49ed99e75886fe61c3fc41c587900775230ac518e059dbf779660dfaec6
aac8e8b1b20c9b6199dac77d88fb4d696cb1f01f2000238dd9d367d9c6dbf936
ef0d64f099058e8656da1ff85203e74eedbf3f5aca6442c6025e06b96e567077
3c1eefad5b96e8f9e8ecaab6c054ca2bc7a7929b03f814f94ba4beab2703aa07
154[.]90[.]32[.]88:8043
8[.]217[.]56[.]157:6379
8[.]217[.]47[.]190:8848
8[.]210[.]195[.]35:8080
![ThreatrayLabs's tweet photo. Earlier this week, @malwrhunterteam reported several unknown samples. Our code similarity engine attributes them to the #FDMTP hacktool, originally reported by @TrendMicro last year. This hacktool is a simple downloader used by the Chinese #APT group #EarthPreta (#MustangPanda).
We retrohunted for this downloader and uncovered additional recent samples. We also extracted the embedded configuration, which is stored in an encrypted format (Base64 + DES).
π§¬#IOCs:
5c0fc49ed99e75886fe61c3fc41c587900775230ac518e059dbf779660dfaec6
aac8e8b1b20c9b6199dac77d88fb4d696cb1f01f2000238dd9d367d9c6dbf936
ef0d64f099058e8656da1ff85203e74eedbf3f5aca6442c6025e06b96e567077
3c1eefad5b96e8f9e8ecaab6c054ca2bc7a7929b03f814f94ba4beab2703aa07
154[.]90[.]32[.]88:8043
8[.]217[.]56[.]157:6379
8[.]217[.]47[.]190:8848
8[.]210[.]195[.]35:8080](https://pbs.twimg.com/media/G6IDRuXWkAAmlbE.jpg)
Last Seen Hashtags on Sotwe
gymsauna
Seen from Spain
Casada
Seen from Brazil
γγγγΌθ¦ι¨
Seen from Japan
trade #mega
Seen from Austria
MorboCornudo
Seen from Mexico
milf
Seen from Venezuela
samsungay
Seen from Turkey
nevertobacco
Seen from United States
ΰΉΰΈ’ΰΉΰΈΰΈ«ΰΈ΅ΰΈ«ΰΈ‘ΰΈ²
Seen from Thailand
nolimit() +filter:native_video
Most Popular Users
Elon Musk 
@elonmusk
240.3M followers
Barack Obama
@barackobama
119.2M followers
Donald J. Trump
@realdonaldtrump
111.6M followers
Cristiano Ronaldo
@cristiano
109.6M followers
Narendra Modi
@narendramodi
106.9M followers
Rihanna
@rihanna
97.4M followers
NASA
@nasa
92.1M followers
Justin Bieber
@justinbieber
90.7M followers
KATY PERRY
@katyperry
87.1M followers
Taylor Swift
@taylorswift13
81M followers
Lady Gaga
@ladygaga
72.5M followers
Kim Kardashian
@kimkardashian
69.5M followers
Virat Kohli
@imvkohli
69.1M followers
YouTube
@youtube
68.6M followers
Bill Gates
@billgates
63.6M followers
The Ellen Show
@theellenshow
62.5M followers
CNN
@cnn
61.9M followers
Neymar Jr
@neymarjr
61.7M followers
X
@x
60.9M followers
Selena Gomez
@selenagomez
60.2M followers