General

  • Target

    opee37.exe

  • Size

    636KB

  • Sample

    231011-h4z2sshd4t

  • MD5

    35d2f720e73634c46f23135dde876bcb

  • SHA1

    312ffc2ae812086301d1e9e4544e24f945af3aa5

  • SHA256

    5cb22bfe2e305bfa94cff485065c5cbfb868f8eb45509e6ea1d9164236d72a13

  • SHA512

    16a021676c3edcc9727b7786bc4b90366ad6e93b78606bef5c07e0e2476a8a45b970f683b4a7810ad30d179ef5c37b29e095d2eb88a591b18e3e71c4ed24f7a7

  • SSDEEP

    6144:JfIJs1RHFDIO5kzJwz9OhcHQU8rATKbGHbI0/tGKP15Vuc7GHbI0/tGKP15Vuc1h:dYmItcH5049Duca049Duc1y6

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      opee37.exe

    • Size

      636KB

    • MD5

      35d2f720e73634c46f23135dde876bcb

    • SHA1

      312ffc2ae812086301d1e9e4544e24f945af3aa5

    • SHA256

      5cb22bfe2e305bfa94cff485065c5cbfb868f8eb45509e6ea1d9164236d72a13

    • SHA512

      16a021676c3edcc9727b7786bc4b90366ad6e93b78606bef5c07e0e2476a8a45b970f683b4a7810ad30d179ef5c37b29e095d2eb88a591b18e3e71c4ed24f7a7

    • SSDEEP

      6144:JfIJs1RHFDIO5kzJwz9OhcHQU8rATKbGHbI0/tGKP15Vuc7GHbI0/tGKP15Vuc1h:dYmItcH5049Duca049Duc1y6

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks