Analysis
-
max time kernel
149s -
max time network
178s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system -
submitted
02-02-2023 22:18
Behavioral task
behavioral1
Sample
cab726a29297e3feba59120e1f2be6f8c15f29a0acc2008a493dbf0850ecf8d3.exe
Resource
win7-20221111-en
windows7-x64
5 signatures
300 seconds
General
-
Target
cab726a29297e3feba59120e1f2be6f8c15f29a0acc2008a493dbf0850ecf8d3.exe
-
Size
3.5MB
-
MD5
c7e0666ac264eff1d8d9a8d30f7c8d50
-
SHA1
2a2913f72905a10a60ee3189d8891eedf5a19398
-
SHA256
cab726a29297e3feba59120e1f2be6f8c15f29a0acc2008a493dbf0850ecf8d3
-
SHA512
be6183c10f413aa99ecf7a92190670fc81673457c2bc29a5681cf3dce2d6ff3a0ab9a2654e70f3ef5ceef5670565fa80c22a517f3c682c921b0513e4c2a7a2fd
-
SSDEEP
98304:hjIQmy+KW/U77AZOBTCUw3A1MICMwQEVC8:npW/U7cmCUw9InEVj
Malware Config
Signatures
-
Detect Fabookie payload 1 IoCs
resource yara_rule behavioral2/memory/3824-116-0x0000000140000000-0x000000014061E000-memory.dmp family_fabookie -
resource yara_rule behavioral2/memory/3824-116-0x0000000140000000-0x000000014061E000-memory.dmp vmprotect