Overview

overview

10

Static

static

10

1232-395-0...ry.dll

windows7-x64

1

1232-395-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1232-395-0x00000000033A0000-0x00000000034D1000-memory.dmp

  • Size

    1.2MB

  • MD5

    7d6a5954dcfe2db1459f0fe1ec730819

  • SHA1

    76772a58a5ae42c6af7b6205df05d4ddbdf498a3

  • SHA256

    52fa6c188e005677321f6efc67e9ac7f5ce09348e55e3fa02faa6bab7025830b

  • SHA512

    141efb60c49d1fc742b1866a7646c745bc72c0ebf28434628cbd5c041776bec0b787c89a905b9bddee91e70c1f63d00d8616b221f3e23763b9333de62826ccb2

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAl1ftxmbfYQJZKr9Ni:7I99DEWVtQAlZmn0r

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1232-395-0x00000000033A0000-0x00000000034D1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections