Overview

overview

10

Static

static

10

1660-602-0...ry.dll

windows7-x64

1

1660-602-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1660-602-0x00000000034A0000-0x00000000035D1000-memory.dmp

  • Size

    1.2MB

  • MD5

    b23cd8d31982624f85c342ff4a59a4dd

  • SHA1

    ef24431a21fc6b17ad05dc1d6010ac9387a0b160

  • SHA256

    80047c9c7ac21177b0e9e019ebe116a37dfa4a325c489b89f06b86829dcf1623

  • SHA512

    3c0e2ec922e359fd04b1b306baa1bb2eb8b2226d6c83315eb2ca5968760ac80309d9092f99b74425c09ab39125f3025f91ccc72e157396ed1ad624172b47408e

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA11ftxmbfYQJZKCd6:7I99DEWVtQA1Zmn0+

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1660-602-0x00000000034A0000-0x00000000035D1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections