Overview

overview

10

Static

static

10

1704-389-0...ry.dll

windows7-x64

1

1704-389-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1704-389-0x00000000035F0000-0x0000000003721000-memory.dmp

  • Size

    1.2MB

  • MD5

    ad66836f4c8c3651add7b661c7b60eaa

  • SHA1

    c077934a2bde51d79a293775b7b9fc2224a4b399

  • SHA256

    d26377a038e06d969a06509222041caf8055a66fb17d6c0af618a2c6f0ebcf6d

  • SHA512

    5799bb46fa85683bde25174cb5a9d71cc2ed7ccda0bebe56426c7848d5130a0cd4504333185d4d9d983f5c62df80e081917d92875d36c8203b2fb47354389581

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAe1ftxmbfYQJZK+ISo:7I99DEWVtQAeZmn0+3

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1704-389-0x00000000035F0000-0x0000000003721000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections