Overview

overview

10

Static

static

10

3612-664-0...ry.dll

windows7-x64

1

3612-664-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3612-664-0x00000000034A0000-0x00000000035D1000-memory.dmp

  • Size

    1.2MB

  • MD5

    635adb69fda950fdb1827e2f4028d893

  • SHA1

    842761b608d0b893f0242263bc01dfaaec24f87c

  • SHA256

    67b67830d4dc0c0d7f3fd15a704fb8f11b897e2642992075d85bc12bc03ff1db

  • SHA512

    70b8c9d9cdd9da381bb8c2c5ed96f696546dbf90a1b1dd24712f67ca167283e666c9184c41a633964a6752b3a0a477a9772b7d8141e9108148f72ceed3d24986

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA11ftxmbfYQJZKddN:7I99DEWVtQA1Zmn0v

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3612-664-0x00000000034A0000-0x00000000035D1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections