Analysis
- max time kernel
140s - max time network
123s - platform
windows10-2004_x64 - resource
win10v2004-20230621-en - resource tags
arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system - submitted
28/06/2023, 20:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
3 signatures
150 seconds
General
- Target file.exe
- Size 313KB
- Sample230628-y285paba25
- SHA256 5b8e096d71a9cd1a4847871083e473b2828eb2aabe0acdba82e722d0bb2e11c3
- MD5 99fb11d82569a087ad64101af0de80f2
- SHA1 aacea1e9a73ee15f94565a8a4bb5e69367da19fb
- SHA512 b79da8a91f3929d26fee65267176a03e968d767c96e144eafa8b058fc1abdf9a83cd24252b34dac6d3ef9439b657f5c867e6e4fe7b9441c76b4bdf8fc1ae7af8
- SSDEEP 3072:E8kUTMYQ0qIN6NtVcOXVK5UMJ2LUPj3keyRS6CSfKVu1xgCAWU8fvJqxEm4x1ES1:DMnt3VPCJPjsp/1fvoxEvTE
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
resource yara_rule behavioral2/memory/988-136-0x0000000002EC0000-0x0000000002FF1000-memory.dmp family_fabookie behavioral2/memory/988-139-0x0000000002EC0000-0x0000000002FF1000-memory.dmp family_fabookie - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.