fabookie | f2fb971f8d6e9472181e41daa66ebbde7430acd541694e921ca1d44b1c50d1e1 | Triage

Sharing

General

Target

f2fb971f8d6e9472181e41daa66ebbde7430acd541694e921ca1d44b1c50d1e1
Size

416KB
Sample

230928-q6j3csbg3t
MD5

a9d0116229cfcbc400d79dd38d000439
SHA1

6db7482415c34c9344e22f391b0b53d6c47a6913
SHA256

f2fb971f8d6e9472181e41daa66ebbde7430acd541694e921ca1d44b1c50d1e1
SHA512

6761ccbb3a29aceddadb2baafd1a2dff71766184d92d5172e6965a9fb75b51fca2c1aeed20f9944ab5ae690f4fb79548647cca26904b244bef4f964da523b9a4
SSDEEP

6144:syUa7AQnwciHMc4oiT4MKBz3I8J6GxerEhgVIXFM:sf4wcAQVrKi6perLIX

Score

10^/10

fabookie spyware stealer

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

- Target
  
  f2fb971f8d6e9472181e41daa66ebbde7430acd541694e921ca1d44b1c50d1e1
- Size
  
  416KB
- MD5
  
  a9d0116229cfcbc400d79dd38d000439
- SHA1
  
  6db7482415c34c9344e22f391b0b53d6c47a6913
- SHA256
  
  f2fb971f8d6e9472181e41daa66ebbde7430acd541694e921ca1d44b1c50d1e1
- SHA512
  
  6761ccbb3a29aceddadb2baafd1a2dff71766184d92d5172e6965a9fb75b51fca2c1aeed20f9944ab5ae690f4fb79548647cca26904b244bef4f964da523b9a4
- SSDEEP
  
  6144:syUa7AQnwciHMc4oiT4MKBz3I8J6GxerEhgVIXFM:sf4wcAQVrKi6perLIX
Score

10^/10

fabookie spyware stealer
- Detect Fabookie payload
- Fabookie
  Fabookie is facebook account info stealer.
  spyware stealer fabookie
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

fabookiespywarestealer