Overview

overview

10

Static

static

10

784-396-0x...ry.dll

windows7-x64

1

784-396-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    784-396-0x0000000003710000-0x0000000003841000-memory.dmp

  • Size

    1.2MB

  • MD5

    be0fdab9d9912936837dc4e5d3a36316

  • SHA1

    704b5ea2674529a0c0e0fd0d47876a3d661ce2d5

  • SHA256

    aaf900633b002ebc011e6d7c6826233904468056047ec94cff6f68ac835fbffd

  • SHA512

    b4d27245199d7bd18af99212cefcdd0203c1a443c217bd6eb65499044603002a58d8354e38753c827b02e3ed53b99320237bfb5cd6a7ceed06ea70f0e69e846c

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAE1ftxmbfYQJZKDzykm:7I99DEWVtQAEZmn0PH

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 784-396-0x0000000003710000-0x0000000003841000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections