Analysis
- max time kernel
138s - max time network
143s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
10/07/2023, 21:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230703-en
3 signatures
150 seconds
General
- Target file.exe
- Size 715KB
- Sample230710-1ercgade34
- SHA256 70244e155a95744792bbf13f8eaab830c3d4a8529cce439cffdc4172b14fcd80
- MD5 fc0c34a3e96105cf9b27b0228f981b1d
- SHA1 6c7b3b8eb923cd7b9b0b3455461cbe52b3e4ce62
- SHA512 e09d701f6be5f101fb9c1040d9abe8da858d1c75f46007f181b7c5928974c028a874bb4561e634203c2972c8bbfac7bcd8d7c1504eb158f44b904c3ed6185e23
- SSDEEP 6144:XA01NdzQ/xQWQvYYaE57i1bdRxQ7cUBmCUiJbc77ZvfuYuEdGxTC2sWf7xLUnw+V:XdEJQWQG1bIShtdGxTC2c5JL
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
resource yara_rule behavioral2/memory/3496-136-0x0000000002AE0000-0x0000000002C11000-memory.dmp family_fabookie behavioral2/memory/3496-139-0x0000000002AE0000-0x0000000002C11000-memory.dmp family_fabookie - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.