Overview

overview

10

Static

static

10

1064-394-0...ry.dll

windows7-x64

1

1064-394-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1064-394-0x0000000003580000-0x00000000036B1000-memory.dmp

  • Size

    1.2MB

  • MD5

    979dddef3ea8f34e3b52a6801db81e2e

  • SHA1

    4198cadab679e2c7c5ef4f1a4bda9decf4829321

  • SHA256

    5b9596ee3546639316fde052a54dea67ec8e21d1e6928ce6eb6ede4c20d98117

  • SHA512

    9aa0692ab13d41c94c40961a9c166c8b95afc69924d4f6928361d20250085b09cdafc1a88521c9d7661f1a977e1546dbd82eac6a7f8630dfd7a72ee2be0f6b65

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAX1ftxmbfYQJZKLTG:7I99DEWVtQAXZmn0P

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1064-394-0x0000000003580000-0x00000000036B1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections