Overview

overview

10

Static

static

10

624-324-0x...ry.dll

windows7-x64

1

624-324-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    624-324-0x0000000003010000-0x0000000003141000-memory.dmp

  • Size

    1.2MB

  • MD5

    b660e46f36953d2a2591cbb9a7e11fb8

  • SHA1

    a859a0051895ff372f718a30b7775ada23dd95ef

  • SHA256

    f0125313b07ba4daa780dbfe4fb13a7ab9c8ff5a13fa71bd193c094d2437fc24

  • SHA512

    0c77dfc1cfb621cf838200b0d60825b13eb86d8e6ad9ebf075b2cd1174a8f0e9f6eece252cd3c2892c702fa382d8017cd2cc71ee99fb0e1b83e906690b96b7a1

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAU1ftxmbfYQJZKXNUC:7I99DEWVtQAUZmn0Xe

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 624-324-0x0000000003010000-0x0000000003141000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections