Analysis
- max time kernel
142s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
19/07/2023, 03:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2qbGLDSDitx6x6NpSCcuTnYE.bin.exe
Resource
win7-20230712-en
3 signatures
150 seconds
General
- Target 2qbGLDSDitx6x6NpSCcuTnYE.bin.exe
- Size 591KB
- Sample230719-d4ryzafe68
- SHA256 42acb4ebe6efba15eb0ed6d1c404335458cb4594493116edf2b0af257fd6e24e
- MD5 92c4629358a520e41cc36eeb56af712d
- SHA1 8fecd46a0aa61c681e7a7f85a950633c85229474
- SHA512 8580054f5bc92f9956de7c47e36bb48cb1dfb0b70dff33494e5722eb2c118cc919d2e2162a2b03249ac6af031d8f7d3b44473c3cb8df36b4b93f5b877b7c9908
- SSDEEP 12288:y72LPfVjvyL8XM3lRkRc4YFwjsWAfRgantPbcTTn7axerx7:eafVrSWM3/kRc4lAgantPbcHn7a
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
resource yara_rule behavioral2/memory/3292-137-0x0000000002F40000-0x0000000003071000-memory.dmp family_fabookie behavioral2/memory/3292-140-0x0000000002F40000-0x0000000003071000-memory.dmp family_fabookie - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.