General

  • Target

    cc85de344e8f04063d89aa593abf223c8c243e69969e4e4f3424d2a4bd96c86b

  • Size

    860KB

  • Sample

    231013-crfjqsaf9x

  • MD5

    f43b4881f8f7b620ac5ef8b79bbf7ba3

  • SHA1

    fdbedcfc8d88b6801668114b2fb8e4e9984bd9cc

  • SHA256

    cc85de344e8f04063d89aa593abf223c8c243e69969e4e4f3424d2a4bd96c86b

  • SHA512

    c8bc187cd1836a247d16bd61ef70e1d48be586af9b369cab72efc9a1befeeed6ea57f560deefd9338114ddd28ccf562b4fe9741c0944faf5cf97859f087474cb

  • SSDEEP

    12288:CIGetS/ITJqrraq/t2qny6xdRhMAK4vcmPEl0Io:MuS/UEn/tUIMGPEl0I

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      cc85de344e8f04063d89aa593abf223c8c243e69969e4e4f3424d2a4bd96c86b

    • Size

      860KB

    • MD5

      f43b4881f8f7b620ac5ef8b79bbf7ba3

    • SHA1

      fdbedcfc8d88b6801668114b2fb8e4e9984bd9cc

    • SHA256

      cc85de344e8f04063d89aa593abf223c8c243e69969e4e4f3424d2a4bd96c86b

    • SHA512

      c8bc187cd1836a247d16bd61ef70e1d48be586af9b369cab72efc9a1befeeed6ea57f560deefd9338114ddd28ccf562b4fe9741c0944faf5cf97859f087474cb

    • SSDEEP

      12288:CIGetS/ITJqrraq/t2qny6xdRhMAK4vcmPEl0Io:MuS/UEn/tUIMGPEl0I

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks