General

  • Target

    SecuriteInfo.com.Trojan.DownLoader45.59549.17549.11156.exe

  • Size

    313KB

  • Sample

    240120-g8xa2adcaq

  • MD5

    a8259a11d59c3a297ba937c0968c0049

  • SHA1

    bbd5d04128390bcb9c03c11fe70d773ba2250040

  • SHA256

    5e6e334f51fcceeb86affb44bf6cc8f9f12e95a4aa0427d35f4f954397dc8d05

  • SHA512

    7e87f3926aa56be946948e604b6167fc22c1fd87b029fa6d944e0f6002c6942b6c5bd6566010eda64e06d59521dbf35c701c169bd47be9e72e2ac36442c061fb

  • SSDEEP

    3072:oVZTMYQ0qIN6NtVcOXHK5ULK2NUPj07eyRS6CSfKVu1xgCAWU8fvJqxEm4x1ESuS:YMnt3HP2PPjYp/1fvoxEvTE

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Targets

    • Target

      SecuriteInfo.com.Trojan.DownLoader45.59549.17549.11156.exe

    • Size

      313KB

    • MD5

      a8259a11d59c3a297ba937c0968c0049

    • SHA1

      bbd5d04128390bcb9c03c11fe70d773ba2250040

    • SHA256

      5e6e334f51fcceeb86affb44bf6cc8f9f12e95a4aa0427d35f4f954397dc8d05

    • SHA512

      7e87f3926aa56be946948e604b6167fc22c1fd87b029fa6d944e0f6002c6942b6c5bd6566010eda64e06d59521dbf35c701c169bd47be9e72e2ac36442c061fb

    • SSDEEP

      3072:oVZTMYQ0qIN6NtVcOXHK5ULK2NUPj07eyRS6CSfKVu1xgCAWU8fvJqxEm4x1ESuS:YMnt3HP2PPjYp/1fvoxEvTE

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks