Analysis
- max time kernel
125s - max time network
133s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
- submitted
20/08/2023, 11:39
General
- Target 64d25623eb7e966c95a73fe2dd3e496f.exe
- Size 636KB
- Sample230820-nsa67agg8s
- SHA256 537fa7a6cf198f1789c91ed778437bdb6b190330a4b619ab778504e081967b5d
Score
10/10
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
- Fabookie
Fabookie is facebook account info stealer.
- Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\64d25623eb7e966c95a73fe2dd3e496f.exe"C:\Users\Admin\AppData\Local\Temp\64d25623eb7e966c95a73fe2dd3e496f.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1072-133-0x00007FF701420000-0x00007FF7014C2000-memory.dmp
memory/1072-143-0x00000000038E0000-0x0000000003A11000-memory.dmp
memory/1072-142-0x0000000003760000-0x00000000038D1000-memory.dmp
memory/1072-146-0x00000000038E0000-0x0000000003A11000-memory.dmp