General

  • Target

    ss29

  • Size

    416KB

  • Sample

    231011-h4g6zshd2s

  • MD5

    b72c1dbf8fec4961378a5a369cfa7ee4

  • SHA1

    47193a3fc3cc9c24c603fa25aa92ca19f1e29a4e

  • SHA256

    f6147edac0f3bf98bf8360176358fe4b4eeeca097325a501dcd32916b60fbe28

  • SHA512

    b8f63bd1deb9cbe7d47b3130575792e03d53b7d31fa65c99fdf640f786226d1747d3a556a1f30df03a7973331277e221206c65a22c9d2d4d49ee34dfda1a5f10

  • SSDEEP

    6144:syUa7AQnwciHMc4oiT4MKBz3I8JWGxerEhgVIXFM:sf4wcAQVrKi61erLIX

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      ss29

    • Size

      416KB

    • MD5

      b72c1dbf8fec4961378a5a369cfa7ee4

    • SHA1

      47193a3fc3cc9c24c603fa25aa92ca19f1e29a4e

    • SHA256

      f6147edac0f3bf98bf8360176358fe4b4eeeca097325a501dcd32916b60fbe28

    • SHA512

      b8f63bd1deb9cbe7d47b3130575792e03d53b7d31fa65c99fdf640f786226d1747d3a556a1f30df03a7973331277e221206c65a22c9d2d4d49ee34dfda1a5f10

    • SSDEEP

      6144:syUa7AQnwciHMc4oiT4MKBz3I8JWGxerEhgVIXFM:sf4wcAQVrKi61erLIX

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks