General

  • Target

    8014779851c25c5eecb407e5a0a609fc862d3f345b95e98906a13c4e1192711e

  • Size

    313KB

  • Sample

    231011-pn834afe9x

  • MD5

    114c7e995e46430d2c52bdd50ccc9493

  • SHA1

    56a55e41dfcec17d0fb8ea19bcd65984a0ca1c7c

  • SHA256

    8014779851c25c5eecb407e5a0a609fc862d3f345b95e98906a13c4e1192711e

  • SHA512

    f3abe94e6432b76517ec7f8fc7afc3587587c178232f5746562db93be618ab8702a44371a8fc96cf1bf514238aa0c8cb7b65ab9a40dc914059b4d317635ed06c

  • SSDEEP

    3072:H0k/TMYQ0qIN65cVcOXqQK5ULK2AjPj0peyRS6CSfKVu1xgCAWU8fvJqxEm4x1ES:JM/c3qQP2FPjSp/1fvoxEvTE

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      8014779851c25c5eecb407e5a0a609fc862d3f345b95e98906a13c4e1192711e

    • Size

      313KB

    • MD5

      114c7e995e46430d2c52bdd50ccc9493

    • SHA1

      56a55e41dfcec17d0fb8ea19bcd65984a0ca1c7c

    • SHA256

      8014779851c25c5eecb407e5a0a609fc862d3f345b95e98906a13c4e1192711e

    • SHA512

      f3abe94e6432b76517ec7f8fc7afc3587587c178232f5746562db93be618ab8702a44371a8fc96cf1bf514238aa0c8cb7b65ab9a40dc914059b4d317635ed06c

    • SSDEEP

      3072:H0k/TMYQ0qIN65cVcOXqQK5ULK2AjPj0peyRS6CSfKVu1xgCAWU8fvJqxEm4x1ES:JM/c3qQP2FPjSp/1fvoxEvTE

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks