General

  • Target

    de8363554508b56c6dbe6350862c77eb.bin

  • Size

    288KB

  • Sample

    240121-dt14wsdfcr

  • MD5

    5e34c981b830bc2591b9778fee778a59

  • SHA1

    2d1a4739646077662d58cb7eebc05af41eb6ca19

  • SHA256

    9ab9f70478dcbfab41a774011858c09ba2e790a6c4e500b1b16b8db7c526b4d1

  • SHA512

    b45027c04265b814793f7d83e6c693273823618e22eaad8b1e6f8d8e33a227549d05404b1d665bc900859d1aae350d422dcf5b9a4d0f8fbaf7671d7f1ead36ab

  • SSDEEP

    6144:2UP8FnnKQOZ0TxOVj/h5PMCuUK2yQb8qv6Mr6t0QzeUypzb624C4fIRF:2UP8FnKQOZ2WLPTuVjpqv6MUTJmzu7Cz

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Targets

    • Target

      23fd6b86e6819fb4261d57222dd17e2e4ed8fce53f6edecc1a0eced8316d8b40.exe

    • Size

      715KB

    • MD5

      de8363554508b56c6dbe6350862c77eb

    • SHA1

      a9cc1b8310bc11db4425ca70cb346dadea4d7e4d

    • SHA256

      23fd6b86e6819fb4261d57222dd17e2e4ed8fce53f6edecc1a0eced8316d8b40

    • SHA512

      d80d1ab2fff16d1d940437a2fdf1d2d1601e404647944c188364dff7280ef6e9e80b758afa8f6364845c624fc476ef8a31e69b088dfb0d381440bc4deb5cf07d

    • SSDEEP

      6144:nA01NdPuvxOWQSYYam57inOdRxQ7cUBmCUiJbc77ZvfuYuEdGxTC2iWf7xLUnw+V:nd25OWJYnOIShtdGxTC2u5JL

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks