Overview

overview

10

Static

static

10

1620-637-0...ry.dll

windows7-x64

1

1620-637-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1620-637-0x00000000033A0000-0x00000000034D1000-memory.dmp

  • Size

    1.2MB

  • MD5

    ad623023771c1628bc0d576640d4d6f8

  • SHA1

    6a49c121c9e135ea920211ccfc39e348cc13ba2f

  • SHA256

    ab482e37cf15c77c08901c987cd34a2ad60cceebbf34b08e55a90a2019943966

  • SHA512

    2ff9cab734cc548fbb15274866509a87f75303400ff55015bf12eb0ace47ff2f106f0aaf202168797b4ef36452f226d510e0b157f55fdcc2906ee3371d7934ee

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAl1ftxmbfYQJZKV9N8:7I99DEWVtQAlZmn0Z

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1620-637-0x00000000033A0000-0x00000000034D1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections