Overview

overview

10

Static

static

10

1948-81-0x...ry.dll

windows7-x64

1

1948-81-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1948-81-0x0000000003190000-0x00000000032C1000-memory.dmp

  • Size

    1.2MB

  • MD5

    a075d80343394748f91eb376ecdd3451

  • SHA1

    4f25988191adc45fd9358b0eb277a7f5eae9d3e9

  • SHA256

    f81c805a25196fdad5fb1f04d62a71a411871308ec793e7987e972b0a780ef2d

  • SHA512

    6fdab1d56bba7cb52e3c3d9086256e6237bcbc690115ede1c3d3a3edbb008292c0654d72743ff70a96b3df245c93068e539c94964cd026163f020ddaa0009db5

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAs1ftxmbfYQJZKD+sc:7I99DEWVtQAsZmn0P

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1948-81-0x0000000003190000-0x00000000032C1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections