Overview

overview

10

Static

static

10

1552-511-0...ry.dll

windows7-x64

1

1552-511-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1552-511-0x00000000034A0000-0x00000000035D1000-memory.dmp

  • Size

    1.2MB

  • MD5

    f26ab7c14d6f9359026c7ccff0c09544

  • SHA1

    75244c7ac8c00405946127c77763d3ebf51092d7

  • SHA256

    3c1a0ce310b02d94fdcd229fdf5f864b78f0fc1a8ed0c09ebb152c06113743a1

  • SHA512

    82d7e163972a36a629c4b14da9afb903359784a8a7a3f784ab7c13d4833cff5d5714a3c9a68b80b9b99310590c3e661786bb9f37d63cfdb390465010c68b41bc

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA11ftxmbfYQJZKedl:7I99DEWVtQA1Zmn0i

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1552-511-0x00000000034A0000-0x00000000035D1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections