Overview

overview

10

Static

static

10

304-1506-0...ry.dll

windows7-x64

1

304-1506-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    304-1506-0x0000000003330000-0x0000000003461000-memory.dmp

  • Size

    1.2MB

  • MD5

    c566585dcd1252d2fffe2bc5b21b3c8b

  • SHA1

    1d9a946b8e694bab38c724a705e08807315ccc9c

  • SHA256

    43d807ea6ac372eced63fa7b309325675d6c46c9544359b94e1673b309306165

  • SHA512

    8b34509746b4c2cc3c2a7bf2dc5cd95477aafa518b281f36bbd081f7d38fa8fc748f7e4c96ea9a61d07462953e403ccc24549fe2b9b794587e08a8411e342aa1

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAi1ftxmbfYQJZKde+:7I99DEWVtQAiZmn0c

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 304-1506-0x0000000003330000-0x0000000003461000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections