Overview

overview

10

Static

static

10

1744-389-0...ry.dll

windows7-x64

1

1744-389-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1744-389-0x0000000002590000-0x00000000026C1000-memory.dmp

  • Size

    1.2MB

  • MD5

    a8a17545ebfe6661ecbc2a4bfcfabff2

  • SHA1

    f5c65b266f2be3e0ae288418dddedf6b9c2234f6

  • SHA256

    468e5cc04b6068bb0f006014389b088a4edb8933bc14fbb8f24568aa503e0064

  • SHA512

    d40126bfc05e676097d5fed27b9d2eedc20c1c274d2dd9fff4a504746341fb30449237fb76c7eecfa6f762a353e2d7eded487e4ea281119eda69aedae8fe070f

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAZ1ftxmbfYQJZKHf9:7I99DEWVtQAZZmn0/

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1744-389-0x0000000002590000-0x00000000026C1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections