Extracted

• • Target

    file.exe

  • Size

    5.0MB

  • MD5

    9fbddfa2696d5061750e6e0ff2162c28

  • SHA1

    a2cc8c949d1404058657ca7fb81854ae092762f3

  • SHA256

    3555805731fe9aeb942a0859e9205481f6367547068658f57ddf38859b8b5cba

  • SHA512

    ea2b807664bc4844ee92f9970ce63a12a98cc42ec23c0f893ef206d09eab9ef6e5b23f36b2671495ee6574e77b0d7cce6503a8950fc48db058037401b1cb068e

  • SSDEEP

    49152:ty/agNoehGYQBcQSiiQMchTQU0Pglz1OCuFTeeoXSS0x1HMToTQFAxTi4I0HQiuq:7CU0Pg91TXKs8Tk4W+f64X

  Score

  10^/10

  fabookiegluptebastealcdropperevasionloaderspywarestealertrojanupx

  • Detect Fabookie payload

  • Fabookie

    Fabookie is facebook account info stealer.

    spywarestealerfabookie

  • Glupteba

    Glupteba is a modular loader written in Golang with various components.

    loaderdropperglupteba

  • Glupteba payload

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • UAC bypass

    evasiontrojan

  • Downloads MZ/PE file

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Checks whether UAC is enabled

    evasiontrojan

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2