General

  • Target

    esgla2i5.exe

  • Size

    416KB

  • Sample

    231011-kwsc4acf31

  • MD5

    a9d0116229cfcbc400d79dd38d000439

  • SHA1

    6db7482415c34c9344e22f391b0b53d6c47a6913

  • SHA256

    f2fb971f8d6e9472181e41daa66ebbde7430acd541694e921ca1d44b1c50d1e1

  • SHA512

    6761ccbb3a29aceddadb2baafd1a2dff71766184d92d5172e6965a9fb75b51fca2c1aeed20f9944ab5ae690f4fb79548647cca26904b244bef4f964da523b9a4

  • SSDEEP

    6144:syUa7AQnwciHMc4oiT4MKBz3I8J6GxerEhgVIXFM:sf4wcAQVrKi6perLIX

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      esgla2i5.exe

    • Size

      416KB

    • MD5

      a9d0116229cfcbc400d79dd38d000439

    • SHA1

      6db7482415c34c9344e22f391b0b53d6c47a6913

    • SHA256

      f2fb971f8d6e9472181e41daa66ebbde7430acd541694e921ca1d44b1c50d1e1

    • SHA512

      6761ccbb3a29aceddadb2baafd1a2dff71766184d92d5172e6965a9fb75b51fca2c1aeed20f9944ab5ae690f4fb79548647cca26904b244bef4f964da523b9a4

    • SSDEEP

      6144:syUa7AQnwciHMc4oiT4MKBz3I8J6GxerEhgVIXFM:sf4wcAQVrKi6perLIX

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks