Overview

overview

10

Static

static

10

2564-362-0...ry.dll

windows7-x64

1

2564-362-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2564-362-0x0000000003700000-0x0000000003831000-memory.dmp

  • Size

    1.2MB

  • MD5

    185a63e2c092306b9ef1851cd65437e2

  • SHA1

    9dc52b1eff3c395e05f61fff4cc8f676cf359e9a

  • SHA256

    4774f53e1d448fdf2fe4d5b61166b92586b547c29a1c8b0f727432a8d9638204

  • SHA512

    32f2e92e6e753d84513306e1e1b53e3e6d510b962d8fd38533f864b44adbc96dc32c46f396d9bfa038baa92ee07728f652c4256756957cb062ae6568aaad7d71

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAP1ftxmbfYQJZKP7H:7I99DEWVtQAPZmn0z

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2564-362-0x0000000003700000-0x0000000003831000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections