Overview

overview

10

Static

static

3

bf8092550a...aa.exe

windows7-x64

10

bf8092550a...aa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf8092550afdf596dd95e8c38bc93b2fe7244dcac48fb2b95a2e1487c45cd9aa

  • Size

    344KB

  • Sample

    230928-jmvanaae55

  • MD5

    86c8dbeabe5b4cd13a06b031193e0cb4

  • SHA1

    915926db22fb8c4f10cd0db08f3d9e3aa2bda5db

  • SHA256

    663c3c9fb6913190790b1963fcb4a7ba1dbb9efb5ee0a74e9efff321cef89315

  • SHA512

    d9c97e4c8335b026c616caf43dd649880b361ce688f09256b73e9b5472cc455f4047366c7a4c2c69ac434ac18057c6ef7f799c4cba62842fc732e4becbca1720

  • SSDEEP

    6144:aGy6RhKyBcjX5BOe5OIsw0h5rNd5ef2svy4dISEH0sxxYCfKYRgVU8fr5rP1:aGy6RhKyKjpizfsBsEusVUar5R

Score
10/10
fabookiespywarestealer

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      bf8092550afdf596dd95e8c38bc93b2fe7244dcac48fb2b95a2e1487c45cd9aa

    • Size

      636KB

    • MD5

      a1e3d69810e55d924bf8ac091235110c

    • SHA1

      1e200e3485a706cccd366a0587610a82193d435c

    • SHA256

      bf8092550afdf596dd95e8c38bc93b2fe7244dcac48fb2b95a2e1487c45cd9aa

    • SHA512

      d2a4d7e18d91e4732d949a85b055ae3e2b6d675aff525967d63edd904a42b37bfe264ebe20e88ba0d2a19421657743e91ca84a31660dccc7fe7ea837f76463b0

    • SSDEEP

      6144:MfIWs1kdFDIZEkzJwz9OhcHQU8rATKbGHbI0/tGKP15Vuc7GHbI0/tGKP15Vuc1h:ubfatcH5049Duca049Duc1y6

    Score
    10/10
    fabookiespywarestealer

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

      spywarestealerfabookie

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks