General

  • Target

    c957aa07aa1dd6d58aff2431b56b2139a0c2d5d6b34d20a978767e0daab58829

  • Size

    933KB

  • Sample

    231004-y4lgeagg85

  • MD5

    6e45986a505bed78232a8867b5860ea6

  • SHA1

    51b142a7e60eecd73c3eaa143eadda4b7e64ac4c

  • SHA256

    c957aa07aa1dd6d58aff2431b56b2139a0c2d5d6b34d20a978767e0daab58829

  • SHA512

    d2d8bc6179795c1c255ec5ac16817f83ff97fcd90481dbe2325a351b448c48a83af03f22ff6dda0cb6ad2401c20b81d2871068aa9e32d2747cc2f5669b440fde

  • SSDEEP

    12288:K72HTp/D0DpEE3M51qvii3mmm6AV5Cqylkg5ZQnXlV5Za5Za5Zj:GA4JM5kRhAVdcpmt44F

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      c957aa07aa1dd6d58aff2431b56b2139a0c2d5d6b34d20a978767e0daab58829

    • Size

      933KB

    • MD5

      6e45986a505bed78232a8867b5860ea6

    • SHA1

      51b142a7e60eecd73c3eaa143eadda4b7e64ac4c

    • SHA256

      c957aa07aa1dd6d58aff2431b56b2139a0c2d5d6b34d20a978767e0daab58829

    • SHA512

      d2d8bc6179795c1c255ec5ac16817f83ff97fcd90481dbe2325a351b448c48a83af03f22ff6dda0cb6ad2401c20b81d2871068aa9e32d2747cc2f5669b440fde

    • SSDEEP

      12288:K72HTp/D0DpEE3M51qvii3mmm6AV5Cqylkg5ZQnXlV5Za5Za5Zj:GA4JM5kRhAVdcpmt44F

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks