Overview

overview

10

Static

static

10

1596-295-0...ry.dll

windows7-x64

1

1596-295-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1596-295-0x0000000002CD0000-0x0000000002E01000-memory.dmp

  • Size

    1.2MB

  • MD5

    76a393c7521aff2cb76335fe14497144

  • SHA1

    eb0481e18f332d451d96ac9ad1f6a4a4b8d1bb08

  • SHA256

    922c4725c0458cbc29a060fbb956cb6afdc01037ae0c0386f47021bbfb06bd73

  • SHA512

    2e59a7bbe3ea505e9eec8a332ce8e8dd1e27ffcc8288d884237a0a5bb61a744f4e6153ecc2df08e615571ec5b928519ee5a4f4c003c0e34985a67a4657d0cbd6

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAd1ftxmbfYQJZKJjN:7I99DEWVtQAdZmn05

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1596-295-0x0000000002CD0000-0x0000000002E01000-memory.dmp
    .dll windows x64


    Headers

    Sections