Overview

overview

10

Static

static

10

2016-343-0...ry.dll

windows7-x64

1

2016-343-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2016-343-0x0000000003660000-0x0000000003791000-memory.dmp

  • Size

    1.2MB

  • MD5

    9928b16663938c8f7dd28a2df1338a01

  • SHA1

    6bdebe03ddc6688f9bfe6ee594e85a4c53592344

  • SHA256

    9b1d63e57d8f847061aa40251d712f2acb5c5b0e22220b647fcb5f7ea15cd886

  • SHA512

    bed24bc30c806adeb808b102de17e7c10fe32b80274c24e0a5d22ea25a77a33dd67fa00c9049130cb9ecb68bcad655687387c7401ef7542b53738f7ec8639709

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAh1ftxmbfYQJZKu5Z:7I99DEWVtQAhZmn0G

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2016-343-0x0000000003660000-0x0000000003791000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections