Analysis
- max time kernel
141s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
20/07/2023, 15:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230712-en
3 signatures
150 seconds
General
- Target file.exe
- Size 292KB
- Sample230720-sdvz9shb65
- SHA256 74d559ebeccc73bc9cc42e3725fe0c5fb69357d9a1a4812106cce5bf3c06394f
- MD5 a59538b5d4db8f09fda133a2bfbb7745
- SHA1 af6306dbe2314eee76689ce108d5a0689412ceef
- SHA512 d96b7336d99a9dbab428da9ef46e58252a85f51f22e15bb6a473dee39c1be198b2038dfc50d8b1531294e85e1313db389d0ee3c1a0faa3de9ee9c9a2fda8f2cd
- SSDEEP 6144:Z8pJxVjZBkhQ5KsYNJdA6NZ+BPMMMUcMUDyu5Wp2iDUdSGZRW:GpJxLWNbp8P2qUd
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
resource yara_rule behavioral2/memory/4748-137-0x0000000002A20000-0x0000000002B51000-memory.dmp family_fabookie behavioral2/memory/4748-140-0x0000000002A20000-0x0000000002B51000-memory.dmp family_fabookie - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.