Overview

overview

10

Static

static

10

780-366-0x...ry.dll

windows7-x64

1

780-366-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    780-366-0x0000000003550000-0x0000000003681000-memory.dmp

  • Size

    1.2MB

  • MD5

    9538ac705121dfa0d51b22b02750c5eb

  • SHA1

    011baf354e0e7b05f59eab128ec09e21dd646d2f

  • SHA256

    e8e8e21f2c1a1d6fcccc3d2c0ca8cde1494000c5382b0e42491587fd75f9a98a

  • SHA512

    338b88f77755de12efd9310f0bcbade0ab5ebce766447540cbcd00c51b06940b5ec4b693bbd79d442fcb9d570928e7f3c0fcad6d02ce99e95b9f835fe6687318

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAo1ftxmbfYQJZKjgo:7I99DEWVtQAoZmn0s

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 780-366-0x0000000003550000-0x0000000003681000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections