Overview

overview

10

Static

static

10

5748-681-0...ry.dll

windows7-x64

1

5748-681-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5748-681-0x0000000003340000-0x0000000003471000-memory.dmp

  • Size

    1.2MB

  • MD5

    009831ea2c48aa3007e77672e73477a8

  • SHA1

    b5269e88864cb898c5659a8dab930e324a29e7a4

  • SHA256

    6cc00de414a9e261b10ea2707fe79b63e31000daaf8892673d0aa7e85b7435f2

  • SHA512

    d7867c89bde4bdea11a4a102087c33d1d874f57846de72d5a4506a99ee4f0b2fad85fa439edc9c59af068d75a8aedcb4cfc3b7d6e5c2e45307446c9121e3871f

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAj1ftxmbfYQJZKYPQ:7I99DEWVtQAjZmn06

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5748-681-0x0000000003340000-0x0000000003471000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections