General

  • Target

    bfa5bf4c04cd22e68df0f443effca797.exe

  • Size

    326KB

  • Sample

    240124-hy1q5scegr

  • MD5

    bfa5bf4c04cd22e68df0f443effca797

  • SHA1

    be6db70542a1a4ef925613d8553d28e54a52f423

  • SHA256

    718643fa7796ed792faa9cc2a139a0d566dae24b00dbd5d7019386d394f79436

  • SHA512

    7870e5660048f428f64047b262412ad43b518c68f642e281d30891057094ff95d468b54cad1b67753ae2538ede31dfdf525825a86798e852f16900057e10da20

  • SSDEEP

    6144:kj83kXffMIwywVvUKBrcisb765kohreOMSYA/U:j3yfU3V1BrcdEkoQCc

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Targets

    • Target

      bfa5bf4c04cd22e68df0f443effca797.exe

    • Size

      326KB

    • MD5

      bfa5bf4c04cd22e68df0f443effca797

    • SHA1

      be6db70542a1a4ef925613d8553d28e54a52f423

    • SHA256

      718643fa7796ed792faa9cc2a139a0d566dae24b00dbd5d7019386d394f79436

    • SHA512

      7870e5660048f428f64047b262412ad43b518c68f642e281d30891057094ff95d468b54cad1b67753ae2538ede31dfdf525825a86798e852f16900057e10da20

    • SSDEEP

      6144:kj83kXffMIwywVvUKBrcisb765kohreOMSYA/U:j3yfU3V1BrcdEkoQCc

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks