Analysis
- max time kernel
123s - max time network
133s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
10/07/2023, 12:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230703-en
3 signatures
150 seconds
General
- Target file.exe
- Size 292KB
- Sample230710-pmq6wsbb4s
- SHA256 cb9b591fb411abb5ba554f6679775eea77df4b035618f679e5bf11cccf215574
- MD5 c756bd728a07726e9e92529b4be0b3ce
- SHA1 32bd8d19833ff2a406befa44b156148bd42f7303
- SHA512 e469a18446a60cffdd9c44f8143110b8239d82268b6a317618fa01e8052236e28643a8fbd9dff74e42972c381bab6967e7a454e0670cb0701be0b863b5051c95
- SSDEEP 6144:Z8pJxC9ZBkhD5GsFNJdA6NZ+BPFMMUcMUDyu5Wp2i7UdSGZRW:GpJxVvNbp8PViUd
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
resource yara_rule behavioral2/memory/900-136-0x0000000002980000-0x0000000002AB1000-memory.dmp family_fabookie behavioral2/memory/900-139-0x0000000002980000-0x0000000002AB1000-memory.dmp family_fabookie - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.