Overview

overview

10

Static

static

3

e3d9fe1d6d...4a.exe

windows7-x64

1

e3d9fe1d6d...4a.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    135s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-06-2023 01:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e3d9fe1d6d23c0641c40e3b3eeda4b08f47f6b93e4afad127436fbaf61a7df4a.exe

  • Size

    287KB

  • MD5

    2c26275cb9949a363f46a0458c9a2883

  • SHA1

    35e7f9a5083cf81116a9fe56d0efbaf7f02ac7b1

  • SHA256

    e3d9fe1d6d23c0641c40e3b3eeda4b08f47f6b93e4afad127436fbaf61a7df4a

  • SHA512

    942b4816e6d40da4e45f3b5f368fcf3a2e100974d7de8d310ea9124facefde0c4ea40092c5724961a467c3548f7d7bc10b6d3362840ade7a7ab8c2eee1303162

  • SSDEEP

    6144:97u5oUxzFzLrZjQ11tUeJpj/4EK8iangu2+UvQ/KpmOq:972XxzFzLtjQ1L/4V7KMvQ/Kp

Score
10/10
fabookiespywarestealer

Malware Config

Signatures

  • Detect Fabookie payload 2 IoCs
  • Fabookie

    Fabookie is facebook account info stealer.

    spywarestealerfabookie
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

Processes

  • C:\Users\Admin\AppData\Local\Temp\e3d9fe1d6d23c0641c40e3b3eeda4b08f47f6b93e4afad127436fbaf61a7df4a.exe
    "C:\Users\Admin\AppData\Local\Temp\e3d9fe1d6d23c0641c40e3b3eeda4b08f47f6b93e4afad127436fbaf61a7df4a.exe"
    1⤵
      PID:3528

    Network

    MITRE ATT&CK Matrix ATT&CK v6

    Initial Access

    Execution

    Persistence

    Privilege Escalation

    Defense Evasion

    Credential Access

    Credentials in Files

    1
    T1081

    Discovery

    Lateral Movement

    Collection

    Data from Local System

    1
    T1005

    Exfiltration

    Command and Control

    Impact

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3528-137-0x0000000002BB0000-0x0000000002D22000-memory.dmp
      Filesize

      1.4MB

      Download
    • memory/3528-138-0x0000000002D30000-0x0000000002E62000-memory.dmp
      Filesize

      1.2MB

      Download
    • memory/3528-139-0x0000000002D30000-0x0000000002E62000-memory.dmp
      Filesize

      1.2MB

      Download