Analysis
- max time kernel
141s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
24/07/2023, 15:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8e93407f004c19fce37cd9af2cfc9e1a.exe
Resource
win7-20230712-en
3 signatures
150 seconds
General
- Target 8e93407f004c19fce37cd9af2cfc9e1a.exe
- Size 210KB
- Sample230724-ssgfesfd2s
- SHA256 4cee09d3527fa54c2e7c67fee399a8ae3c8b7791a79c5e44f3144eff6e82e1a2
- MD5 8e93407f004c19fce37cd9af2cfc9e1a
- SHA1 698f6062ee1044f02c979d49e456147934601b29
- SHA512 3a5a5247cfdf8f09391ca240755243d8a93ccabba2fb20835b3edc93d42b4da46636fefda876af75fccc9cf221dd33c130c006bdc1bb994450fada0d19f987a8
- SSDEEP 3072:iPBCEk3kKqUa9antF5hvvJkeXp2QhHkKqUa9antF5hvvJkeXp:VUKq99UF5hvvfjhEKq99UF5hvvf
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
resource yara_rule behavioral2/memory/5072-137-0x0000000002C60000-0x0000000002D91000-memory.dmp family_fabookie behavioral2/memory/5072-140-0x0000000002C60000-0x0000000002D91000-memory.dmp family_fabookie - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.