Overview

overview

10

Static

static

10

3332-642-0...ry.dll

windows7-x64

1

3332-642-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3332-642-0x0000000003900000-0x0000000003A31000-memory.dmp

  • Size

    1.2MB

  • MD5

    ad464587e72016d04fe538165d100159

  • SHA1

    3596c7b51e272bd00a91ab62973f096d28f57e18

  • SHA256

    68183572cf1310cf85fccf7a3696e4f541f5020f0a48d65ae2d38d9b6f6d13f9

  • SHA512

    328aba151dfd48bf16296ff1105597dd73d51a196258f3fa1f3b381f102835f8006057d466b1619755a6e0aa22e11c3b08936706d78d0ff437cc9cd1561c40d5

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAv1ftxmbfYQJZKibk:7I99DEWVtQAvZmn0o

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3332-642-0x0000000003900000-0x0000000003A31000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections