Extracted

Extracted

• • Target
    e99107f51a615207824a28411b0355fba67cbda8dbd24d450a84cbe40aa8faf5
  • Size 3.6MB
  • SHA256 e99107f51a615207824a28411b0355fba67cbda8dbd24d450a84cbe40aa8faf5
  • MD5 78260204ab2a8d1039ea744d228ced1f
  • SHA1 a108fb238a98c5090e3824db51a8a92ce0eb6cb1
  • SHA512 2895dc42aa22b201c1fb809ffd7c6be40870a75b953e66299fdf222c3b5d299ad85172aea3ccbebda4a5af3a34766005a4ec3b96114c7fb56784d49efaf84b39
  • SSDEEP 98304:UbR1dh6claIxZJrXentG2P8aGsw2kvpDNsK:UN1dIcljZ9MJP8fP75F
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  fabookieffdroidersocelarsdiscoverypersistencespywarestealerupxevasiontrojan

  • Detect Fabookie payload

  • FFDroider

    Stealer targeting social media platform users first seen in April 2022.

    stealerffdroider

  • Fabookie

    Fabookie is facebook account info stealer.

    spywarestealerfabookie

  • Fabookie family

    fabookie

  • Ffdroider family

    ffdroider

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Socelars family

    socelars

  • Socelars payload

  • Detected Nirsoft tools

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Checks whether UAC is enabled

    evasiontrojan

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of NtCreateThreadExHideFromDebugger

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2