Overview

overview

10

Static

static

10

5924-625-0...ry.dll

windows7-x64

1

5924-625-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5924-625-0x00000000034A0000-0x00000000035D1000-memory.dmp

  • Size

    1.2MB

  • MD5

    65363063afbc83afa14d0a5ef71717f5

  • SHA1

    b9ecd20b656c8c0c55476d09c4738c3d4ddd370d

  • SHA256

    ddbeabaf44886eec9774d423961da42402974c8de6d30dac514416fb90914dc6

  • SHA512

    1eab1c34b950b4a0c91002ffed38276d703e4bc724445863011ab778a794cb1359d213ce8c8552bd013d8c6d096e2b62b9a1013af6dc40bebd58b09d411abd6c

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA11ftxmbfYQJZKAdU:7I99DEWVtQA1Zmn0I

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5924-625-0x00000000034A0000-0x00000000035D1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections