Analysis
- max time kernel
143s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
10/07/2023, 14:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230703-en
3 signatures
150 seconds
General
- Target file.exe
- Size 715KB
- Sample230710-sa1fksbd59
- SHA256 f87bd8a08297af331b8ab18c393811d175e5fbc414fec1dec69520c06f32bd33
- MD5 9eb56cdeda0afc492bf1cc42aef4a737
- SHA1 512fb9d463aca71af5aace2225f1ef9fa980fc04
- SHA512 8b018858d0cf13ff3addb4ff3b993aac2e4d11f2ef6b7cfb6f554f8a4c9a80ae260c1c8d09311553db8058baf7e035b5cc203cb222b4c996e8a2c83a24123231
- SSDEEP 6144:XA01NdzQ/xQWQvYYaE57i1bdRxQ7cUBmCUiJbc77ZvfuYuEdGxTC2UWf7xLUnw+V:XdEJQWQG1bIShtdGxTC2U5JL
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
resource yara_rule behavioral2/memory/2448-136-0x0000000003060000-0x0000000003191000-memory.dmp family_fabookie behavioral2/memory/2448-139-0x0000000003060000-0x0000000003191000-memory.dmp family_fabookie - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.