Overview

overview

10

Static

static

10

1964-614-0...ry.dll

windows7-x64

1

1964-614-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1964-614-0x0000000003580000-0x00000000036B1000-memory.dmp

  • Size

    1.2MB

  • MD5

    8924fa153512d50707e6c2266a70bcd1

  • SHA1

    be007c59ab1695f8405a3656169179fe5d8e8c19

  • SHA256

    f8b95804c387928d357576a09a3870236e40b1dd81c678524008930d8cc34d2d

  • SHA512

    3416b8787c32c5299cc580c429b0a83e9a6b8d4c254b988ba2b5328ec9aaf3815918c2eb610e7b0f803d57aa697a1b2b2032f6df992c1efbca970a16a37d908e

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAX1ftxmbfYQJZKnTP:7I99DEWVtQAXZmn0T

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1964-614-0x0000000003580000-0x00000000036B1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections