General

  • Target

    8444807d63be70a6b66d0b14421bd88fd8f909f567e1aade8d91615c15713d3d

  • Size

    591KB

  • Sample

    240129-fjbglacabk

  • MD5

    ff51fa1f2bfb9c2b30435bcd1a593c17

  • SHA1

    1c21f67ca78d468a617d94ff02f70b8eafb52d63

  • SHA256

    8444807d63be70a6b66d0b14421bd88fd8f909f567e1aade8d91615c15713d3d

  • SHA512

    97a23c60bc64fb2c8ba8f73881be0f91866d96533f515a9c3e9ecb690bf699f81c777d68262fbfd435939741fc9b180f4d3d0fb8d2d5e2789b3e03d12b6e5cc6

  • SSDEEP

    12288:y72BP5zjveo8XM3lRkRc4YFwjsWAfRgantPbcTTn7axerx7:e45zrRWM3/kRc4lAgantPbcHn7a

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Targets

    • Target

      8444807d63be70a6b66d0b14421bd88fd8f909f567e1aade8d91615c15713d3d

    • Size

      591KB

    • MD5

      ff51fa1f2bfb9c2b30435bcd1a593c17

    • SHA1

      1c21f67ca78d468a617d94ff02f70b8eafb52d63

    • SHA256

      8444807d63be70a6b66d0b14421bd88fd8f909f567e1aade8d91615c15713d3d

    • SHA512

      97a23c60bc64fb2c8ba8f73881be0f91866d96533f515a9c3e9ecb690bf699f81c777d68262fbfd435939741fc9b180f4d3d0fb8d2d5e2789b3e03d12b6e5cc6

    • SSDEEP

      12288:y72BP5zjveo8XM3lRkRc4YFwjsWAfRgantPbcTTn7axerx7:e45zrRWM3/kRc4lAgantPbcHn7a

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks