General

  • Target

    0c9093975346591d7fe991ed8bd448d21aaeb1d65b7c48122a19624e0775d583

  • Size

    396KB

  • Sample

    240122-fer9jsgfdl

  • MD5

    34a7dbf9c978714dd0679079c5445a10

  • SHA1

    476cebbf6d7a39ef3dd96e8d2d1d4684fb03faab

  • SHA256

    0c9093975346591d7fe991ed8bd448d21aaeb1d65b7c48122a19624e0775d583

  • SHA512

    9bea78ecc8ef389c3755626423cbc758357bca2345b2fc521d9113572a30c1bd84f85bf55693ba1c67ec3cac2aaef13d44641650c226629391612df27a43c1b0

  • SSDEEP

    1536:XyK9MKyCC4UuOCWqeyGaOi2K+Sm6uCWqe+aOi2K+Sm6uuCuCWqeyGaOi2K+Sm6u9:XX9MLxuBXnAYy4AZ6qevcgJFW

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Targets

    • Target

      0c9093975346591d7fe991ed8bd448d21aaeb1d65b7c48122a19624e0775d583

    • Size

      396KB

    • MD5

      34a7dbf9c978714dd0679079c5445a10

    • SHA1

      476cebbf6d7a39ef3dd96e8d2d1d4684fb03faab

    • SHA256

      0c9093975346591d7fe991ed8bd448d21aaeb1d65b7c48122a19624e0775d583

    • SHA512

      9bea78ecc8ef389c3755626423cbc758357bca2345b2fc521d9113572a30c1bd84f85bf55693ba1c67ec3cac2aaef13d44641650c226629391612df27a43c1b0

    • SSDEEP

      1536:XyK9MKyCC4UuOCWqeyGaOi2K+Sm6uCWqe+aOi2K+Sm6uuCuCWqeyGaOi2K+Sm6u9:XX9MLxuBXnAYy4AZ6qevcgJFW

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks