Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
25/12/2024, 01:41
General
-
Target
7zS8A52FD1B/62a1ea2d09364_3056ccd.exe
-
Size
3.7MB
-
MD5
e77f09a338e643ee05ad09e367eedf73
-
SHA1
6777cd291ece93e16aa95c3e60b63d46b1b142bd
-
SHA256
f32c3414f14e0b4c08183af08702736a2ed18c99101d5ee1bc5bc5e8ee3c8982
-
SHA512
53f59267e4bfe862e51edb0fd7d356485a7349e7ccd6439c6c88bda921a67909a36efd1690d06fe3c30c8a4433d5c4c1a34c30b928cb29ec45b08045ef4f5747
-
SSDEEP
98304:cTuZYsUpMZzlBC5ngscs0r0aAcsiddcE:Nb8KByng80gt
Score
10/10
Malware Config
Signatures
-
Detect Fabookie payload 1 IoCs
-
Fabookie
Fabookie is facebook account info stealer.
-
Fabookie family
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes
-
C:\Users\Admin\AppData\Local\Temp\7zS8A52FD1B\62a1ea2d09364_3056ccd.exe"C:\Users\Admin\AppData\Local\Temp\7zS8A52FD1B\62a1ea2d09364_3056ccd.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.5MB