Overview

overview

10

Static

static

3

rty49.exe

windows7-x64

10

rty49.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rty49.exe

  • Size

    715KB

  • Sample

    240206-hh4g4ahgd9

  • MD5

    3e496c5bccc4c5b1186e6ed94056f462

  • SHA1

    aee5c6f162720ed91825d720e0b6ef1f0513e13c

  • SHA256

    635a839f2a2d2dcf6ef852a9db80a61104c69c7c9e2532d3413f7f82ddf4cbc1

  • SHA512

    a72d553a7d2fc1793ee3e5e464be48afd7c1fd824747546705a2659f6fd643ae4f03d1b9eaf545ea846beeb8f4c7faf1744ef545b9416ce1977d6d9d7a805c52

  • SSDEEP

    6144:nA01Nd5uvxQWQSYYaE5CinBdRxQ7cUBmCUiJbc77ZvfuYuEdGxTC28Wf7xLUnw+V:ndo5QWJnnBIShtdGxTC2M5JL

Score
10/10
fabookiespywarestealer

Malware Config

Targets

    • Target

      rty49.exe

    • Size

      715KB

    • MD5

      3e496c5bccc4c5b1186e6ed94056f462

    • SHA1

      aee5c6f162720ed91825d720e0b6ef1f0513e13c

    • SHA256

      635a839f2a2d2dcf6ef852a9db80a61104c69c7c9e2532d3413f7f82ddf4cbc1

    • SHA512

      a72d553a7d2fc1793ee3e5e464be48afd7c1fd824747546705a2659f6fd643ae4f03d1b9eaf545ea846beeb8f4c7faf1744ef545b9416ce1977d6d9d7a805c52

    • SSDEEP

      6144:nA01Nd5uvxQWQSYYaE5CinBdRxQ7cUBmCUiJbc77ZvfuYuEdGxTC28Wf7xLUnw+V:ndo5QWJnnBIShtdGxTC2M5JL

    Score
    10/10
    fabookiespywarestealer

    • Detect Fabookie payload

    • Fabookie

      Fabookie is facebook account info stealer.

      spywarestealerfabookie

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks