Analysis
- max time kernel
150s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20230621-en - resource tags
arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system - submitted
02/07/2023, 00:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aafg31.exe
Resource
win7-20230621-en
4 signatures
150 seconds
General
- Target aafg31.exe
- Size 321KB
- Sample230702-ajfhnabc4y
- SHA256 aa26cfbb528cd91c2b29827df28911115e377de9bd2c3dfe2f554f905c1bb826
- MD5 91ec853e75e7e069149c97d2c126ffb6
- SHA1 1aff8aa2940f85e8e87fa16b130c23feaede946d
- SHA512 02539134dc96cee622f4c9551a3a2e8fbe4fd2f7f02eb0caa018cea3f6246624dacfe299dd0475f0c549314c597c2fb01ec1353ccb7cf51101fa9545fc4bdeb2
- SSDEEP 6144:S/ji2HtZcrWFoWdN46VL6VWxtoloBj5rbx:CNZcyNdN9VWVJ6Bj5rbx
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
resource yara_rule behavioral2/memory/228-142-0x0000000002FE0000-0x0000000003111000-memory.dmp family_fabookie behavioral2/memory/228-145-0x0000000002FE0000-0x0000000003111000-memory.dmp family_fabookie - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.