General

  • Target

    7f65a6c3980e34e815a8a74420b12cb88ef2abc58e6b91c2026e96ffe5709d41

  • Size

    344KB

  • Sample

    231011-ltqbdseh2w

  • MD5

    4cd2501697300fb36eb132638dfefa96

  • SHA1

    012dc8ef32d7f54dbe912baa0e081c3744621326

  • SHA256

    de216f8fdee09e8d483b71a092eb6e836c1565664af04b2f6444b4be9f7aac04

  • SHA512

    6d085f86255325cc8f48d46bb9354a39c4d5893cc74dbc44d19448d10f7d64cc09f84bfefe69bc2bf1a6c2f715f152d5c591ce0a273c3f64a390eeae0adf7c2a

  • SSDEEP

    6144:9Gy6RhKyBcjX5BBumK04oqAh0mKCtQZFJUU9EA/LKtqkDSGl+xRmPqQ:9Gy6RhKyKjpx4ox0mp8/UUjD6+eUQ

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      7f65a6c3980e34e815a8a74420b12cb88ef2abc58e6b91c2026e96ffe5709d41

    • Size

      636KB

    • MD5

      916abe7da167424883e61d39dfbe165a

    • SHA1

      e789ebc67fb3de4d9b2bd67edddf36157d2c92aa

    • SHA256

      7f65a6c3980e34e815a8a74420b12cb88ef2abc58e6b91c2026e96ffe5709d41

    • SHA512

      3251d32889a7b0fba76c9a8e1907a0a245c63ebfd35a5669b87c8123972c2ec9e88ecd0a57d1c3a0f4c5abd6337384e2d90238f54320e180015f6243500719b0

    • SSDEEP

      6144:MfIWs1kdFDIZQkzJwz9OhcHQU8rATKbGHbI0/tGKP15Vuc7GHbI0/tGKP15Vuc1h:ubfWtcH5049Duca049Duc1y6

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks