General

  • Target

    428f02bcb39dd6f73493dd55f55e263e.exe

  • Size

    416KB

  • Sample

    231007-f9expshd2x

  • MD5

    428f02bcb39dd6f73493dd55f55e263e

  • SHA1

    0e0ca90f5559dbfa6d67be821543a0d659b45074

  • SHA256

    a302bc1bdfa51e0ff8433b56c231a42e5bce39ad47b7346ee8e3c33e359d55d9

  • SHA512

    c6a7301a9f977eccc8bcdb11311215b481a9dd6b61bfd955ab42b891da715049ce58fccf52dac3c67750bc4e8804f37113664496ff73c318ba8e4f214481ff16

  • SSDEEP

    6144:syUa7AQnwciHMc4oiT4MKBz3I8JiGxerEhgVIXFM:sf4wcAQVrKi6BerLIX

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      428f02bcb39dd6f73493dd55f55e263e.exe

    • Size

      416KB

    • MD5

      428f02bcb39dd6f73493dd55f55e263e

    • SHA1

      0e0ca90f5559dbfa6d67be821543a0d659b45074

    • SHA256

      a302bc1bdfa51e0ff8433b56c231a42e5bce39ad47b7346ee8e3c33e359d55d9

    • SHA512

      c6a7301a9f977eccc8bcdb11311215b481a9dd6b61bfd955ab42b891da715049ce58fccf52dac3c67750bc4e8804f37113664496ff73c318ba8e4f214481ff16

    • SSDEEP

      6144:syUa7AQnwciHMc4oiT4MKBz3I8JiGxerEhgVIXFM:sf4wcAQVrKi6BerLIX

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks