Overview

overview

10

Static

static

10

1096-875-0...ry.dll

windows7-x64

1

1096-875-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1096-875-0x00000000037A0000-0x00000000038D1000-memory.dmp

  • Size

    1.2MB

  • MD5

    331f3764840b1aab480f4ed6aad0e7d8

  • SHA1

    2177ce4d86ee306f1d9a4d9390ad7295ba3661c9

  • SHA256

    40f6b5e54e3b8f4444647dd2ee5e0eb753f22e85652e19889f7a41633426eb96

  • SHA512

    0e5c3cccee2015adf77a3aea6df504a1286378ccebced8c6dfcc2afeb6c0fd8ca245b26e5688d6d34e7a89606660bfd0062c6bbf640db80731a26d9bbf8fd630

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAl1ftxmbfYQJZKhNO:7I99DEWVtQAlZmn0b

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1096-875-0x00000000037A0000-0x00000000038D1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections