Analysis
- max time kernel
139s - max time network
127s - platform
windows10-2004_x64 - resource
win10v2004-20230621-en - resource tags
arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system - submitted
01/07/2023, 09:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
4 signatures
150 seconds
General
- Target file.exe
- Size 591KB
- Sample230701-k2qfpage76
- SHA256 274f5d3d6967d77475ceee848a0dff2cfc9993923861de020e3856bd54ba8fc7
- MD5 e83efdb43dc0a53378ccddbd91cb721f
- SHA1 4c37dcb21172e28a1933953dfd20d77f58148bab
- SHA512 060fc829364932e9452f4a28c81ac13509d807edbe264aceb5ea636230f5aba699308eaab3b9598c5a6b44818c99737752c4327adb97ac5fec71bc664a25f1ae
- SSDEEP 12288:Q72WwSPjvuL8XM3lRkRc4YFwjsWAfRgantPbcTTn7axerx7:wwSPr6WM3/kRc4lAgantPbcHn7a
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
resource yara_rule behavioral2/memory/4828-142-0x00000000038D0000-0x0000000003A01000-memory.dmp family_fabookie behavioral2/memory/4828-145-0x00000000038D0000-0x0000000003A01000-memory.dmp family_fabookie - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.