Overview

overview

10

Static

static

10

3804-394-0...ry.dll

windows7-x64

1

3804-394-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3804-394-0x00000000034E0000-0x0000000003611000-memory.dmp

  • Size

    1.2MB

  • MD5

    ba4a50217b655783d8faf7f42f3df195

  • SHA1

    3a7a00004c89949db6675f9c701973095596cb29

  • SHA256

    3ec2ccad8a83ddad686f0b411d7afb589d515576cc0644c977d3ff72194e713d

  • SHA512

    8d96f530d5c72d7318db9d353af5848f15aa16ec6493b84154f7f38839504dad1c1fa82887af08cc1fd416b2a466c4f16dd2eec1c7f94635052ece6c958dd516

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAJ1ftxmbfYQJZKISRGz:7I99DEWVtQAJZmn0ICG

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3804-394-0x00000000034E0000-0x0000000003611000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections