Extracted

Extracted

• • Target

    7dc8ba99829b20160eeb99435c0896055e2e96690dd924d611d959be7868cdf2

  • Size

    3.5MB

  • MD5

    06ba4eb5e4c4b967d200f4a7bd62342e

  • SHA1

    490584d8559878bd1fe17a5f8a230ef58bef1f51

  • SHA256

    7dc8ba99829b20160eeb99435c0896055e2e96690dd924d611d959be7868cdf2

  • SHA512

    7403f615a1a0141c5d6570f41ae5a21640e2f53e706921057670fda6cb3f70cfab133003b4948370d56e35a4fc357a8651f5b49d525e0722ce7e92ffdca8a495

  • SSDEEP

    98304:Ub71d26claIxZ3reeloEZACVaWM601Tw2kvpDrs4:UX1dxcljZSidH9K1s75r

  Score

  10^/10

  fabookieffdroidersocelarsdiscoveryevasionpersistencespywarestealertrojanupx

  • Detect Fabookie payload

  • FFDroider

    Stealer targeting social media platform users first seen in April 2022.

    stealerffdroider

  • Fabookie

    Fabookie is facebook account info stealer.

    spywarestealerfabookie

  • Fabookie family

    fabookie

  • Ffdroider family

    ffdroider

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Socelars family

    socelars

  • Socelars payload

  • Detected Nirsoft tools

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Checks whether UAC is enabled

    evasiontrojan

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of NtCreateThreadExHideFromDebugger

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2