Analysis
- max time kernel
139s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20230831-en - resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system - submitted
08/09/2023, 07:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
4 signatures
150 seconds
General
- Target file.exe
- Size 636KB
- Sample230908-janbkshf61
- SHA256 fbd0a287a85f2099df62a8d02e4a0e46e0ded0fa250fb851c378471dc90c4921
- MD5 8a4f84d97711a335f2420caff2f65fc7
- SHA1 92f878a1ed4ccf4711a59b031756c9364f7ee3fb
- SHA512 9802b7ce3433d2d508f12dbe4fe78e63678599236b0d9c6ed8f40ef22b005b8760a1dfe75da145967abc699d5964b3b0d520ae99c2bc4751a8c8d88e47871d11
- SSDEEP 12288:2quFbYJO3VldEX5fYwerPZpdqxByfndmLB:2qObuUd7PzdqTem9
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
resource yara_rule behavioral2/memory/5064-10-0x0000000003960000-0x0000000003A91000-memory.dmp family_fabookie behavioral2/memory/5064-13-0x0000000003960000-0x0000000003A91000-memory.dmp family_fabookie - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.