General

  • Target

    NEAS.637dbce64106ecb582f119403822e138_JC.exe

  • Size

    416KB

  • Sample

    231007-pd1c7sec79

  • MD5

    637dbce64106ecb582f119403822e138

  • SHA1

    da2989852244e0b0a90e8916635ab35c0f4906eb

  • SHA256

    c82c8f3777d5193351ffc815625ad1e03e2816c88a4a4e0fdaf9c1fce8ba8921

  • SHA512

    602a85efa48ada65dd74a76a3f814e652cf78b806947028e417f0d69c5fff49a33ab50c1ea434f629246b11b3609e0abfffe997e2521dcd030809cad5f2933db

  • SSDEEP

    6144:syUa7AQnwciHMc4oiT4MKBz3I8JmGxerEhgVIXFM:sf4wcAQVrKi6FerLIX

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      NEAS.637dbce64106ecb582f119403822e138_JC.exe

    • Size

      416KB

    • MD5

      637dbce64106ecb582f119403822e138

    • SHA1

      da2989852244e0b0a90e8916635ab35c0f4906eb

    • SHA256

      c82c8f3777d5193351ffc815625ad1e03e2816c88a4a4e0fdaf9c1fce8ba8921

    • SHA512

      602a85efa48ada65dd74a76a3f814e652cf78b806947028e417f0d69c5fff49a33ab50c1ea434f629246b11b3609e0abfffe997e2521dcd030809cad5f2933db

    • SSDEEP

      6144:syUa7AQnwciHMc4oiT4MKBz3I8JmGxerEhgVIXFM:sf4wcAQVrKi6FerLIX

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks