General

  • Target

    c268935f0f5f82c94c918ba9911a0b1d.exe

  • Size

    860KB

  • Sample

    231012-3vy4csfd4t

  • MD5

    c268935f0f5f82c94c918ba9911a0b1d

  • SHA1

    bdbcc1f3e28e764a41c757149878cb5acd6b869e

  • SHA256

    6b159b28d5e088d7186e164215e9cfe4f4acf13c040629adb93c2ee33d2942bd

  • SHA512

    a47babb3977c0c346b5cd2046250821a85f5b0d3a17f9c18cad4671c0e5a9a42305c017f2b933a8e98627d3403c118d6cd8756885d1fa333cc8caad77f7dd985

  • SSDEEP

    12288:CwGetS/ITJqrraq/t2qny6xdRhMAK4vcmPEl0Io:kuS/UEn/tUIMGPEl0I

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      c268935f0f5f82c94c918ba9911a0b1d.exe

    • Size

      860KB

    • MD5

      c268935f0f5f82c94c918ba9911a0b1d

    • SHA1

      bdbcc1f3e28e764a41c757149878cb5acd6b869e

    • SHA256

      6b159b28d5e088d7186e164215e9cfe4f4acf13c040629adb93c2ee33d2942bd

    • SHA512

      a47babb3977c0c346b5cd2046250821a85f5b0d3a17f9c18cad4671c0e5a9a42305c017f2b933a8e98627d3403c118d6cd8756885d1fa333cc8caad77f7dd985

    • SSDEEP

      12288:CwGetS/ITJqrraq/t2qny6xdRhMAK4vcmPEl0Io:kuS/UEn/tUIMGPEl0I

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks