General

  • Target

    e6cbd8da9a712315ee4654b569a8cbb24433f677debc4ed5c738e537cdea6626

  • Size

    313KB

  • Sample

    231011-ppgegahe49

  • MD5

    a80a68f0421662a2a3ae7479b7b91ac4

  • SHA1

    dfc8cd4e7787e7b268383e232b5df4e5c6ada6c2

  • SHA256

    e6cbd8da9a712315ee4654b569a8cbb24433f677debc4ed5c738e537cdea6626

  • SHA512

    14ee643c993ccd3995e60d1b3f0956984bd2af17132ac0ac8bef4c8aacc1ba191201c4460092e15313416dd900bfdf2fc708b4b1e0ef5347204a76b44ebc0bb1

  • SSDEEP

    3072:H0k/TMYQ0qIN65cVcOXqQK5ULK2AjPj0ReyRS6CSfKVu1xgCAWU8fvJqxEm4x1ES:JM/c3qQP2FPjqp/1fvoxEvTE

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      e6cbd8da9a712315ee4654b569a8cbb24433f677debc4ed5c738e537cdea6626

    • Size

      313KB

    • MD5

      a80a68f0421662a2a3ae7479b7b91ac4

    • SHA1

      dfc8cd4e7787e7b268383e232b5df4e5c6ada6c2

    • SHA256

      e6cbd8da9a712315ee4654b569a8cbb24433f677debc4ed5c738e537cdea6626

    • SHA512

      14ee643c993ccd3995e60d1b3f0956984bd2af17132ac0ac8bef4c8aacc1ba191201c4460092e15313416dd900bfdf2fc708b4b1e0ef5347204a76b44ebc0bb1

    • SSDEEP

      3072:H0k/TMYQ0qIN65cVcOXqQK5ULK2AjPj0ReyRS6CSfKVu1xgCAWU8fvJqxEm4x1ES:JM/c3qQP2FPjqp/1fvoxEvTE

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks