General

  • Target

    SecuriteInfo.com.Trojan.DownLoader45.63083.12118.8880.exe

  • Size

    860KB

  • Sample

    231013-b7a4hshg9t

  • MD5

    173eb4f9c0dcbce62177b1cd4397a549

  • SHA1

    bdf17b961b6f3a505fcf7aeeb01f377262c83450

  • SHA256

    34a854115367951a8347c6134d3d484e12f5cdaf40364665682708ff2702717f

  • SHA512

    dda0e1d380beadaf9ddf8588df5ea76a3672df700aac2f825582d1e02a7769c37c5616d113e6b3dbfddaf955aab5af93c79db6a928b93b995b5650a5957fb651

  • SSDEEP

    12288:CuGetS/ITJqrraq/t2qny6xdRhMAK4vcmPEl0Io:+uS/UEn/tUIMGPEl0I

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      SecuriteInfo.com.Trojan.DownLoader45.63083.12118.8880.exe

    • Size

      860KB

    • MD5

      173eb4f9c0dcbce62177b1cd4397a549

    • SHA1

      bdf17b961b6f3a505fcf7aeeb01f377262c83450

    • SHA256

      34a854115367951a8347c6134d3d484e12f5cdaf40364665682708ff2702717f

    • SHA512

      dda0e1d380beadaf9ddf8588df5ea76a3672df700aac2f825582d1e02a7769c37c5616d113e6b3dbfddaf955aab5af93c79db6a928b93b995b5650a5957fb651

    • SSDEEP

      12288:CuGetS/ITJqrraq/t2qny6xdRhMAK4vcmPEl0Io:+uS/UEn/tUIMGPEl0I

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks