Analysis
- max time kernel
119s - max time network
124s - platform
windows7_x64 - resource
win7-20230712-en - resource tags
- submitted
19/07/2023, 04:34
General
- Target c8d4c02e3d2695daec4e46ae5bd60924.exe
- Size 591KB
- Sample230719-e64k8afg75
- SHA256 921be1b8d816c2be89215fabed8b804e7befceceb9094c0c8ab8f38b70bdcf2f
Score
10/10
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
- Fabookie
Fabookie is facebook account info stealer.
- Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c8d4c02e3d2695daec4e46ae5bd60924.exe"C:\Users\Admin\AppData\Local\Temp\c8d4c02e3d2695daec4e46ae5bd60924.exe"1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2524-53-0x00000000FF1B0000-0x00000000FF247000-memory.dmp
memory/2524-56-0x0000000002C30000-0x0000000002DA0000-memory.dmp
memory/2524-57-0x0000000002A70000-0x0000000002BA1000-memory.dmp
memory/2524-60-0x0000000002A70000-0x0000000002BA1000-memory.dmp