Overview

overview

10

Static

static

10

1888-364-0...ry.dll

windows7-x64

1

1888-364-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1888-364-0x0000000002B10000-0x0000000002C41000-memory.dmp

  • Size

    1.2MB

  • MD5

    d8d69e59b62968ba6d53088d8158c306

  • SHA1

    4dda93ed5090fcd1dea221b1d1a10db3dc29ffec

  • SHA256

    ae3f6738280cc7a684b54f9fb0a27a29c32e19c390cf764667c71727f0e5c7d3

  • SHA512

    a39962010e1bfa3c5436dee6395cf65ec73033c062d4c5de73577662758d8534e125a47561ff7fee687229a7f27c24019f2c700d59917326ee2059ecd1c5081e

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAR1ftxmbfYQJZK7XT:7I99DEWVtQARZmn0T

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1888-364-0x0000000002B10000-0x0000000002C41000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections