General

  • Target

    file.exe

  • Size

    715KB

  • Sample

    240118-v6kfcaehc7

  • MD5

    bfa0a2b457d28d8805a0658b7498c639

  • SHA1

    5e3f58501f72d390a3faeea193c73a96a8aeda8a

  • SHA256

    6c38c13d9baaa24d925488112a469611270f37b0508bb2dc0f7775072c7a77d9

  • SHA512

    6b8f333dc441b17caca25bae1b2522dc12188ee502ec54e08ee77361d0f2090c57b8f90f0c6ee8a936497b684e4438bfc5e0274590c7497cdf42a2c8b267dfe9

  • SSDEEP

    6144:nA01NdPuvxOWQSYYam57inOdRxQ7cUBmCUiJbc77ZvfuYuEdGxTC2SWf7xLUnw+V:nd25OWJYnOIShtdGxTC2+5JL

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Targets

    • Target

      file.exe

    • Size

      715KB

    • MD5

      bfa0a2b457d28d8805a0658b7498c639

    • SHA1

      5e3f58501f72d390a3faeea193c73a96a8aeda8a

    • SHA256

      6c38c13d9baaa24d925488112a469611270f37b0508bb2dc0f7775072c7a77d9

    • SHA512

      6b8f333dc441b17caca25bae1b2522dc12188ee502ec54e08ee77361d0f2090c57b8f90f0c6ee8a936497b684e4438bfc5e0274590c7497cdf42a2c8b267dfe9

    • SSDEEP

      6144:nA01NdPuvxOWQSYYam57inOdRxQ7cUBmCUiJbc77ZvfuYuEdGxTC2SWf7xLUnw+V:nd25OWJYnOIShtdGxTC2+5JL

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks