Overview

overview

10

Static

static

10

3976-314-0...ry.dll

windows7-x64

1

3976-314-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3976-314-0x0000000002C60000-0x0000000002D91000-memory.dmp

  • Size

    1.2MB

  • MD5

    15ac0b0601252a9adc7d3465ca0c2db0

  • SHA1

    6ee386296a5aa5c93477ab33118a677474c48cbc

  • SHA256

    8d305e2f910767ddecc321fc266717763df95c7a3acc8fe48dc4a2d890d4e3c4

  • SHA512

    e166d75745cc5ff3662cb4dadb2620723f41f8fced5b8c9e8d55f1e4eb441a4d0f408e59bbc4bb69a1fa3e6ec4c4b2fda6edbb7581f62278a073b5b389743b29

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA01ftxmbfYQJZKdKt:7I99DEWVtQA0Zmn0s

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3976-314-0x0000000002C60000-0x0000000002D91000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections