Overview

overview

10

Static

static

10

1880-524-0...ry.dll

windows7-x64

1

1880-524-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1880-524-0x0000000003660000-0x0000000003791000-memory.dmp

  • Size

    1.2MB

  • MD5

    4abe676e453fc8c78b521c7d0a2e351f

  • SHA1

    baf2f858e3485237260785e36d7516256769fba2

  • SHA256

    74efa1063f73e1cc4386170bfc86fc2b9383170575078c812f26dd660efd0864

  • SHA512

    0bf558c938f988faea3d4a1e8e5576f1235e24386468bae23f2ae295365c6809c2e53371675760e4d4efa15c8bda6f981977aab24ab809b734959726f4ef20c6

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAh1ftxmbfYQJZKm5i:7I99DEWVtQAhZmn0e

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1880-524-0x0000000003660000-0x0000000003791000-memory.dmp
    .dll windows x64


    Headers

    Sections