Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
269s -
max time network
301s -
platform
windows10-1703_x64 -
resource
win10-20231215-en -
resource tags
arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system -
submitted
04/02/2024, 07:40
Static task
static1
Behavioral task
behavioral1
Sample
655ec713446b922fe8e9233e614d813906c4ce43c4db273180cd8c2c6a79d52c.exe
Resource
win7-20231215-en
General
-
Target
655ec713446b922fe8e9233e614d813906c4ce43c4db273180cd8c2c6a79d52c.exe
-
Size
715KB
-
MD5
f838df75b8246152af74728a058fa8c8
-
SHA1
3eddf463a67b5a200b0737f4574224250e85068e
-
SHA256
655ec713446b922fe8e9233e614d813906c4ce43c4db273180cd8c2c6a79d52c
-
SHA512
5df11d0fea0b929fbdcfb223c10b1c266b041950f87fc7ad249dc369a55fc8c747330c5937d2effed2365c5cd8ccb0c673c98e2b9ac3f4b810cedda0fce5c8fd
-
SSDEEP
6144:nA01NdBRvxQWQSYYaE57iibdoaxQ7cUBmCUiJbc77ZvfuYuEdGxTC2+Wf7xLUnwa:nd/5QWJGibiFShtdGxTC2K5JL
Malware Config
Signatures
-
Detect Fabookie payload 2 IoCs
resource yara_rule behavioral2/memory/4324-12-0x0000000003190000-0x00000000032BC000-memory.dmp family_fabookie behavioral2/memory/4324-15-0x0000000003190000-0x00000000032BC000-memory.dmp family_fabookie -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.