Overview

overview

10

Static

static

10

1536-287-0...ry.dll

windows7-x64

1

1536-287-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1536-287-0x00000000031A0000-0x00000000032D1000-memory.dmp

  • Size

    1.2MB

  • MD5

    554b15e880b471f1d329990aa5b97e05

  • SHA1

    65024d877a05d3a03af04005ac60d910f7b16863

  • SHA256

    647cf9c54119e9742b939e09e8e333dfe823b5d59a1ee1dba0bfb1707dfeabc5

  • SHA512

    c5001bc6a841dccc61771f232fa5d5c10d78e13952c7303abaf6c84699a9a7d15ca2d3caa51d5940e5e97b6fbeabe16628c1c388b5b18aee5ccc7607b21f0674

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAF1ftxmbfYQJZK0tm:7I99DEWVtQAFZmn0k

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1536-287-0x00000000031A0000-0x00000000032D1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections