General

  • Target

    1f50a480c5a15f69d47a9ef703f1db2b837fb60b683321e5b8ebef5fd740eed4

  • Size

    313KB

  • Sample

    231011-pnxp3ahe26

  • MD5

    4f11bf9c4f0002126072590e0834b59f

  • SHA1

    3c7eb3e28cfd5a4e1fd58a8405ecddfba6512729

  • SHA256

    1f50a480c5a15f69d47a9ef703f1db2b837fb60b683321e5b8ebef5fd740eed4

  • SHA512

    a3de95550e03d0748d08d8e1c75ba681b486c8faf8f898f612f99aa9a219785cb99a086991191bafedebddffca343ff0828d87ce624aa804a5ee97286bcb4f51

  • SSDEEP

    3072:H0k/TMYQ0qIN65cVcOXqQK5ULK2AjPj01eyRS6CSfKVu1xgCAWU8fvJqxEm4x1ES:JM/c3qQP2FPj+p/1fvoxEvTE

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      1f50a480c5a15f69d47a9ef703f1db2b837fb60b683321e5b8ebef5fd740eed4

    • Size

      313KB

    • MD5

      4f11bf9c4f0002126072590e0834b59f

    • SHA1

      3c7eb3e28cfd5a4e1fd58a8405ecddfba6512729

    • SHA256

      1f50a480c5a15f69d47a9ef703f1db2b837fb60b683321e5b8ebef5fd740eed4

    • SHA512

      a3de95550e03d0748d08d8e1c75ba681b486c8faf8f898f612f99aa9a219785cb99a086991191bafedebddffca343ff0828d87ce624aa804a5ee97286bcb4f51

    • SSDEEP

      3072:H0k/TMYQ0qIN65cVcOXqQK5ULK2AjPj01eyRS6CSfKVu1xgCAWU8fvJqxEm4x1ES:JM/c3qQP2FPj+p/1fvoxEvTE

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks