fabookie | 7da786b32ec861208fc6a01b94d4eee4867b26dabfe214b66c9009b2f0222050 | Triage

Submit
Reports

Overview

overview

Static

static

3

fb545037ab...ee.exe

windows7-x64

fb545037ab...ee.exe

windows10-2004-x64

Sharing

General

Target

fb545037ab489bdbe428559235a61cee
Size

4.6MB
Sample

240112-qqtlvsgghj
MD5

fb545037ab489bdbe428559235a61cee
SHA1

74b0dccbaaa27d7acc64427be1dee07269d0c71c
SHA256

7da786b32ec861208fc6a01b94d4eee4867b26dabfe214b66c9009b2f0222050
SHA512

14329cf8f45e65c107356c318aa19c334938863dcbb15df25b4218e6e32461afc0a1d0d9118a483db281824103e681e725820321347cd62c42dede0055c6b76f
SSDEEP

98304:3GA0UBXf1laFPEoSmXMAgpe48eDQZNkMOvr/juAS5i2zNsO:2A1fraU2ueZecTkMOD/juAS/Ns

Score

10^/10

fabookie glupteba dropper evasion loader spyware stealer upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

fb545037ab489bdbe428559235a61cee.exe

Resource

win7-20231129-en

fabookie glupteba dropper evasion loader spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

fb545037ab489bdbe428559235a61cee.exe

Resource

win10v2004-20231215-en

glupteba dropper evasion loader upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  fb545037ab489bdbe428559235a61cee
- Size
  
  4.6MB
- MD5
  
  fb545037ab489bdbe428559235a61cee
- SHA1
  
  74b0dccbaaa27d7acc64427be1dee07269d0c71c
- SHA256
  
  7da786b32ec861208fc6a01b94d4eee4867b26dabfe214b66c9009b2f0222050
- SHA512
  
  14329cf8f45e65c107356c318aa19c334938863dcbb15df25b4218e6e32461afc0a1d0d9118a483db281824103e681e725820321347cd62c42dede0055c6b76f
- SSDEEP
  
  98304:3GA0UBXf1laFPEoSmXMAgpe48eDQZNkMOvr/juAS5i2zNsO:2A1fraU2ueZecTkMOD/juAS/Ns
Score

10^/10

fabookie glupteba dropper evasion loader spyware stealer upx
- Detect Fabookie payload
- Fabookie
  Fabookie is facebook account info stealer.
  spyware stealer fabookie
- Glupteba
  Glupteba is a modular loader written in Golang with various components.
  loader dropper glupteba
- Glupteba payload
- Modifies Windows Firewall
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Create or Modify System Process

Windows Service

Scheduled Task/Job

Privilege Escalation

Create or Modify System Process

Windows Service

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

fabookiegluptebadropperevasionloaderspywarestealer

behavioral2

gluptebadropperevasionloaderupx

© 2018-2025

Terms | Privacy