Analysis
- max time kernel
107s - max time network
128s - platform
windows10-2004_x64 - resource
win10v2004-20230621-en - resource tags
arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system - submitted
02/07/2023, 23:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
4 signatures
150 seconds
General
- Target file.exe
- Size 245KB
- Sample230702-3nvglafc4s
- SHA256 922eaabfa10ed3e5b647a39480f654866f4d4daff57fbda4adc0b3a91a9b4df5
- MD5 3cb4486372d26a40c580113343e41ba7
- SHA1 c06e3bfb65cdb8dfe1880534950ae9c443dad147
- SHA512 f66431db407e31667f01a0772a2d699ff78866ca61f38647b1274fac7321ffeb081124984909a6a1e56831846eef1e8ba15615f333cd3db7ef961c6b845e9dbf
- SSDEEP 6144:dTG3HW77/IpsZAoovGTeTiv5LeNDGOb+asE:dT7K4eTiv5Lyb
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
resource yara_rule behavioral2/memory/3000-142-0x0000000003510000-0x0000000003641000-memory.dmp family_fabookie behavioral2/memory/3000-145-0x0000000003510000-0x0000000003641000-memory.dmp family_fabookie - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.