Overview

overview

10

Static

static

10

1804-291-0...ry.dll

windows7-x64

1

1804-291-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1804-291-0x0000000003500000-0x0000000003631000-memory.dmp

  • Size

    1.2MB

  • MD5

    28e38cb2caca055f7e5f5e5ed6935225

  • SHA1

    269bb3eb0a895789e324fe0f267964b9e575ab79

  • SHA256

    ef1682ec2944453478d2124f1278037b537b49ec6db52361b6c2ba8bdbf8cbe4

  • SHA512

    3315314ed27f126d0ffddf729e63e853b715b407e878e4f0a900d14b81eafe37d82b7e78cfe8ba55703e52c835bf18fa210211569c9f7b5290dff24994a7691f

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAv1ftxmbfYQJZKub8:7I99DEWVtQAvZmn0c

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1804-291-0x0000000003500000-0x0000000003631000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections