General

  • Target

    b767902c36417651810c83e7331e8936c5560e5eced3b8d02674b6a4a0c4e4a2_JC.exe

  • Size

    334KB

  • Sample

    231013-cwv5zscf75

  • MD5

    670add147fa800c55dae647a90f9e4c1

  • SHA1

    a1fb811f5766f7b5440bcf835e34e4cd7ac66d94

  • SHA256

    b767902c36417651810c83e7331e8936c5560e5eced3b8d02674b6a4a0c4e4a2

  • SHA512

    2862dc769344abc65dcf3387df6bf0de56e7f36896b89b0937e83173ba97052fa1955c5c65eefb599b776a4dc5007fc2c26f14c43e0ab75c1081b414e77160bf

  • SSDEEP

    6144:zFH8RIT6Fam1StJ3rXDW49Vl7SkDHPiaODgKYleQ4SWP:zWdGXDzP7aM+P

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Targets

    • Target

      b767902c36417651810c83e7331e8936c5560e5eced3b8d02674b6a4a0c4e4a2_JC.exe

    • Size

      334KB

    • MD5

      670add147fa800c55dae647a90f9e4c1

    • SHA1

      a1fb811f5766f7b5440bcf835e34e4cd7ac66d94

    • SHA256

      b767902c36417651810c83e7331e8936c5560e5eced3b8d02674b6a4a0c4e4a2

    • SHA512

      2862dc769344abc65dcf3387df6bf0de56e7f36896b89b0937e83173ba97052fa1955c5c65eefb599b776a4dc5007fc2c26f14c43e0ab75c1081b414e77160bf

    • SSDEEP

      6144:zFH8RIT6Fam1StJ3rXDW49Vl7SkDHPiaODgKYleQ4SWP:zWdGXDzP7aM+P

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks