Analysis
- max time kernel
142s - max time network
159s - platform
windows10-2004_x64 - resource
win10v2004-20230831-en - resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system - submitted
11/09/2023, 22:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
4 signatures
150 seconds
General
- Target file.exe
- Size 503KB
- Sample230911-2ss9naca85
- SHA256 7b0efba8c51a5f83078f28a6db7129d43db9d4ae71818e2f5fb755dc721880dc
- MD5 b0399ed1bae59f87bae4898f0f8dc1f0
- SHA1 53e0b5f34beecc640c72de25fad776b0fa1ca5ad
- SHA512 8e23dc509d27e73545c34b4ff5480dae3a16b9d71ec1eb8288125199aca280429b6ec6546afe9c31022abaac1f4e55d0784858c8df85377f6df8e6e9b758550e
- SSDEEP 6144:3VuKq99UF5hvvfjhEKq99UF5hvvfpo32NCKlAjwjlsk5qv6sblzgaeEubfpR0cQ3:wQnDSQnhCrwjqk5Ablzg3bf7RQrOtylR
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detect Fabookie payload 2 IoCs
resource yara_rule behavioral2/memory/4620-10-0x0000000002F50000-0x0000000003081000-memory.dmp family_fabookie behavioral2/memory/4620-13-0x0000000002F50000-0x0000000003081000-memory.dmp family_fabookie - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.