Overview

overview

10

Static

static

10

1932-824-0...ry.dll

windows7-x64

1

1932-824-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1932-824-0x0000000003540000-0x0000000003671000-memory.dmp

  • Size

    1.2MB

  • MD5

    ad49e6bb2759ae3af1116395c3277879

  • SHA1

    b91aa2e49e9810723e59275f278faae4feeeb955

  • SHA256

    954e8932468e8677445d509b4f5e87a6618cdec7768e716aaf5715613cd90c7b

  • SHA512

    dcfcaae6cba9b1b77c00fb0d99a1d9ec89e598bb3e7a4e74d3041d3a48cb510d28fd385a1107af764c0606df19870b77a9aeb7762087eb5ef3d3ea860bd02033

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAD1ftxmbfYQJZK1vN:7I99DEWVtQADZmn0F

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1932-824-0x0000000003540000-0x0000000003671000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections