General

  • Target

    3ae4b14cf333991d4816255ff9c017e250cafd1b4506a18eb3a1b2f4f5841cb1

  • Size

    313KB

  • Sample

    231011-pn91dshe45

  • MD5

    e4dcba9ca9beb2c0d281dabf38b8d658

  • SHA1

    0c9d5aff1c47833dd117bd67010d4784dc18ccd6

  • SHA256

    3ae4b14cf333991d4816255ff9c017e250cafd1b4506a18eb3a1b2f4f5841cb1

  • SHA512

    0775ff5a2277c884a267b211fd73a73f451e110a32e19e1f70a0a9b1f5f26850fd011976b4916eba04bae27b74365e895fb5f1e8624f2266eb15fb2792ff6203

  • SSDEEP

    3072:H0k/TMYQ0qIN65cVcOXqQK5ULK2AjPj0DeyRS6CSfKVu1xgCAWU8fvJqxEm4x1ES:JM/c3qQP2FPj4p/1fvoxEvTE

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      3ae4b14cf333991d4816255ff9c017e250cafd1b4506a18eb3a1b2f4f5841cb1

    • Size

      313KB

    • MD5

      e4dcba9ca9beb2c0d281dabf38b8d658

    • SHA1

      0c9d5aff1c47833dd117bd67010d4784dc18ccd6

    • SHA256

      3ae4b14cf333991d4816255ff9c017e250cafd1b4506a18eb3a1b2f4f5841cb1

    • SHA512

      0775ff5a2277c884a267b211fd73a73f451e110a32e19e1f70a0a9b1f5f26850fd011976b4916eba04bae27b74365e895fb5f1e8624f2266eb15fb2792ff6203

    • SSDEEP

      3072:H0k/TMYQ0qIN65cVcOXqQK5ULK2AjPj0DeyRS6CSfKVu1xgCAWU8fvJqxEm4x1ES:JM/c3qQP2FPj4p/1fvoxEvTE

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks