General

  • Target

    de8363554508b56c6dbe6350862c77eb.exe

  • Size

    715KB

  • Sample

    240119-t8sztsaeg9

  • MD5

    de8363554508b56c6dbe6350862c77eb

  • SHA1

    a9cc1b8310bc11db4425ca70cb346dadea4d7e4d

  • SHA256

    23fd6b86e6819fb4261d57222dd17e2e4ed8fce53f6edecc1a0eced8316d8b40

  • SHA512

    d80d1ab2fff16d1d940437a2fdf1d2d1601e404647944c188364dff7280ef6e9e80b758afa8f6364845c624fc476ef8a31e69b088dfb0d381440bc4deb5cf07d

  • SSDEEP

    6144:nA01NdPuvxOWQSYYam57inOdRxQ7cUBmCUiJbc77ZvfuYuEdGxTC2iWf7xLUnw+V:nd25OWJYnOIShtdGxTC2u5JL

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Targets

    • Target

      de8363554508b56c6dbe6350862c77eb.exe

    • Size

      715KB

    • MD5

      de8363554508b56c6dbe6350862c77eb

    • SHA1

      a9cc1b8310bc11db4425ca70cb346dadea4d7e4d

    • SHA256

      23fd6b86e6819fb4261d57222dd17e2e4ed8fce53f6edecc1a0eced8316d8b40

    • SHA512

      d80d1ab2fff16d1d940437a2fdf1d2d1601e404647944c188364dff7280ef6e9e80b758afa8f6364845c624fc476ef8a31e69b088dfb0d381440bc4deb5cf07d

    • SSDEEP

      6144:nA01NdPuvxOWQSYYam57inOdRxQ7cUBmCUiJbc77ZvfuYuEdGxTC2iWf7xLUnw+V:nd25OWJYnOIShtdGxTC2u5JL

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks