Overview

overview

10

Static

static

10

3068-479-0...ry.dll

windows7-x64

1

3068-479-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3068-479-0x0000000003320000-0x0000000003451000-memory.dmp

  • Size

    1.2MB

  • MD5

    132a690f1082fffd323854204f8a0e0d

  • SHA1

    f297b67dddc2352c24ecd2f43331f7e9c4e17a23

  • SHA256

    89ec0da03a5bd9589da2953a4ee06b12917cac0c3d1dc41c99ad4fb86e54aad0

  • SHA512

    8bb948dd83b58f95c269e4bc7521fe9a987c017a9c05bde89b8306afda294512444e8b38930107c545a7848b9335a90491e84761d54cc17bf5d731c6e2031762

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA91ftxmbfYQJZK1UVP:7I99DEWVtQA9Zmn01M

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3068-479-0x0000000003320000-0x0000000003451000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections