General

  • Target

    file.exe

  • Size

    715KB

  • Sample

    231011-nlvl9adh72

  • MD5

    51ceadf4bccf5ab2b982aa9eff0aef98

  • SHA1

    2c0ee90e0a13cb805a0dd0911f54a3031f57fc5c

  • SHA256

    892644435c434079e3480917019ebb6bba308377582aca0951617340f7621d18

  • SHA512

    9082f69881ea7ce5816e876e841261cbf37deedd9972c8615f4444aff83850cfa4f7bd7f7b87f26cc61dd559a3f6f09440bb6e45cd362caed67fadaf5c396260

  • SSDEEP

    6144:XA01NdPuvxQWrSYYaER7ifbiERxQ7cUBmCUiJbc77ZvfuYuEdGxTC2JWf7xLUnwa:Xd25QWWqfb0ShtdGxTC2n5JL

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      file.exe

    • Size

      715KB

    • MD5

      51ceadf4bccf5ab2b982aa9eff0aef98

    • SHA1

      2c0ee90e0a13cb805a0dd0911f54a3031f57fc5c

    • SHA256

      892644435c434079e3480917019ebb6bba308377582aca0951617340f7621d18

    • SHA512

      9082f69881ea7ce5816e876e841261cbf37deedd9972c8615f4444aff83850cfa4f7bd7f7b87f26cc61dd559a3f6f09440bb6e45cd362caed67fadaf5c396260

    • SSDEEP

      6144:XA01NdPuvxQWrSYYaER7ifbiERxQ7cUBmCUiJbc77ZvfuYuEdGxTC2JWf7xLUnwa:Xd25QWWqfb0ShtdGxTC2n5JL

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks