General

  • Target

    NEAS.7ce942cdc58ba5fa628d97f991c8a794294c2acfb724efbf0ac887c47942a31eexe_JC.exe

  • Size

    416KB

  • Sample

    231006-r1k8xafb72

  • MD5

    83330cf6e88ad32365183f31b1fd3bda

  • SHA1

    1c5b47be2b8713746de64b39390636a81626d264

  • SHA256

    7ce942cdc58ba5fa628d97f991c8a794294c2acfb724efbf0ac887c47942a31e

  • SHA512

    e28a9c47f690b0b0f0dd3b946d9cd59c761803f3826a382208a5b92be1293067b37a39f1141ddda13247b96138a108ce2f85b83de0143d48d4acc94f69a11908

  • SSDEEP

    6144:syUa7AQnwciHMc4oiT4MKBz3I8JKGxerEhgVIXFM:sf4wcAQVrKi65erLIX

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      NEAS.7ce942cdc58ba5fa628d97f991c8a794294c2acfb724efbf0ac887c47942a31eexe_JC.exe

    • Size

      416KB

    • MD5

      83330cf6e88ad32365183f31b1fd3bda

    • SHA1

      1c5b47be2b8713746de64b39390636a81626d264

    • SHA256

      7ce942cdc58ba5fa628d97f991c8a794294c2acfb724efbf0ac887c47942a31e

    • SHA512

      e28a9c47f690b0b0f0dd3b946d9cd59c761803f3826a382208a5b92be1293067b37a39f1141ddda13247b96138a108ce2f85b83de0143d48d4acc94f69a11908

    • SSDEEP

      6144:syUa7AQnwciHMc4oiT4MKBz3I8JKGxerEhgVIXFM:sf4wcAQVrKi65erLIX

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks