Overview

overview

10

Static

static

3

6c38c13d9b...d9.exe

windows7-x64

10

6c38c13d9b...d9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bfa0a2b457d28d8805a0658b7498c639.bin

  • Size

    288KB

  • Sample

    240120-d2388aahhq

  • MD5

    fd9456fd0496e2706635a1006bff5947

  • SHA1

    5dbdd9dda02fd2a17c175737ae7973e5a47d252d

  • SHA256

    8ae1892b68b7316f8fc9651753765c5c7fe9641d06b245751767ae8f9382868f

  • SHA512

    4c7f8bd1a4903eb57be36a8e4ff88c16547523c7566dc6ac7672da2ea50e4df222140618ff087cdd4328955f83c29b24d442f1c5e7ba51c829f73cb3a57e2051

  • SSDEEP

    6144:TGS+cHxMKCM2+cWGgVGG8+b9rduXnO1pK4:TGv2AM6gDr9rdOO1pK4

Score
10/10
fabookiespywarestealer

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Targets

    • Target

      6c38c13d9baaa24d925488112a469611270f37b0508bb2dc0f7775072c7a77d9.exe

    • Size

      715KB

    • MD5

      bfa0a2b457d28d8805a0658b7498c639

    • SHA1

      5e3f58501f72d390a3faeea193c73a96a8aeda8a

    • SHA256

      6c38c13d9baaa24d925488112a469611270f37b0508bb2dc0f7775072c7a77d9

    • SHA512

      6b8f333dc441b17caca25bae1b2522dc12188ee502ec54e08ee77361d0f2090c57b8f90f0c6ee8a936497b684e4438bfc5e0274590c7497cdf42a2c8b267dfe9

    • SSDEEP

      6144:nA01NdPuvxOWQSYYam57inOdRxQ7cUBmCUiJbc77ZvfuYuEdGxTC2SWf7xLUnw+V:nd25OWJYnOIShtdGxTC2+5JL

    Score
    10/10
    fabookiespywarestealer

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

      spywarestealerfabookie

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks