General

  • Target

    ade4a018ea550bae6cdc382b06641b88e0740afe69e6a4ebfe4e21afc5a321a3

  • Size

    416KB

  • Sample

    231004-d946gsgh8s

  • MD5

    ee4ad7c7f91b7e8c4b204342ba02cf78

  • SHA1

    008bd478718c954ead668aeca74f202a25912b02

  • SHA256

    ade4a018ea550bae6cdc382b06641b88e0740afe69e6a4ebfe4e21afc5a321a3

  • SHA512

    a94dbe0b80a005dd6b1cf1df297f92424e6d4f20e9973979c8861d4d8a7dcfb4007c91a1041aca14d00fbceb91d314d0f34e61689bf70894435ac6c364a1934d

  • SSDEEP

    6144:syUa7AQnwciHMc4oiT4MKBz3I8J+GxerEhgVIXFM:sf4wcAQVrKi6NerLIX

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      ade4a018ea550bae6cdc382b06641b88e0740afe69e6a4ebfe4e21afc5a321a3

    • Size

      416KB

    • MD5

      ee4ad7c7f91b7e8c4b204342ba02cf78

    • SHA1

      008bd478718c954ead668aeca74f202a25912b02

    • SHA256

      ade4a018ea550bae6cdc382b06641b88e0740afe69e6a4ebfe4e21afc5a321a3

    • SHA512

      a94dbe0b80a005dd6b1cf1df297f92424e6d4f20e9973979c8861d4d8a7dcfb4007c91a1041aca14d00fbceb91d314d0f34e61689bf70894435ac6c364a1934d

    • SSDEEP

      6144:syUa7AQnwciHMc4oiT4MKBz3I8J+GxerEhgVIXFM:sf4wcAQVrKi6NerLIX

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks