Analysis
- max time kernel
141s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
21/07/2023, 14:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230712-en
3 signatures
150 seconds
General
- Target file.exe
- Size 288KB
- Sample230721-sb53fsff2w
- SHA256 a6fc4a38eba09a4fd88f8ef483a908f19a03190ead4cb4e04fe223fab02b8a7d
- MD5 4142eaff997e130d4d92722fe8828e41
- SHA1 40d7b1408b39e2028a59257a72d49876a555c88a
- SHA512 99ef96e397015df7e0c036063a20a43b81873546fbb009513fd0912cdc32bf94836733bb188abdef573c9a79d0198df0be229bb68690ab9e423414c8b003317b
- SSDEEP 6144:x7u5DOxzF2L8ZlQk1tUeJpj/43M8Rangu2+UvQ/KpmOq:x72SxzF2LilQkL/4cEKMvQ/Kp
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
resource yara_rule behavioral2/memory/2884-137-0x0000000002DD0000-0x0000000002F01000-memory.dmp family_fabookie behavioral2/memory/2884-140-0x0000000002DD0000-0x0000000002F01000-memory.dmp family_fabookie - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.