Overview

overview

10

Static

static

10

1584-1154-...ry.dll

windows7-x64

1

1584-1154-...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1584-1154-0x0000000003660000-0x0000000003791000-memory.dmp

  • Size

    1.2MB

  • MD5

    ef4cb82f578492a9f8466e7c8f9788ef

  • SHA1

    0c5afb6c6141499e76e288808e045e742865faa6

  • SHA256

    8d9920a9f1281cde7b555f8ee83ca5395445206badd50ba7868dca12ae0e56a7

  • SHA512

    909ee935deaaa6ed362019e35309f78064dd51cdc89f280b9bebeea11569208ab058be10d140e074abe7880c6867e60ba75a4ea2d9441695297cdf73998410c4

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAh1ftxmbfYQJZKQ5O:7I99DEWVtQAhZmn0k

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1584-1154-0x0000000003660000-0x0000000003791000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections