Overview

overview

10

Static

static

10

4996-369-0...ry.dll

windows7-x64

1

4996-369-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    4996-369-0x00000000038B0000-0x00000000039E1000-memory.dmp

  • Size

    1.2MB

  • MD5

    cb0b3a53c8fdcb99205c7b33bf44c8e3

  • SHA1

    b1fd6e705259b33fabd4a815c4405993faaabb9f

  • SHA256

    b9f091c7137a2ea4165322a1e19e8b5ab63134357f6ef6a11981f952a8ef3240

  • SHA512

    e3dafae096e4e1fe1fbce5345ca351f76e476f96bf2055c2ed3857c7d1907f4523b71b29c47f6d8ecbb223f5bfbe973c5ca66a4ade0af4a198d813dabe0da12e

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAa1ftxmbfYQJZKoWa:7I99DEWVtQAaZmn0r

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4996-369-0x00000000038B0000-0x00000000039E1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections