Overview

overview

10

Static

static

10

108-316-0x...ry.dll

windows7-x64

1

108-316-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    108-316-0x00000000035F0000-0x0000000003721000-memory.dmp

  • Size

    1.2MB

  • MD5

    41ebe7e0286ae78f7e7d818b64c73b4d

  • SHA1

    bf477e668d47d7ed6d0ff08a35f79f13c2a03380

  • SHA256

    f3c8d4fc10633b7a4288dbe92025649a300c28f6c57401bd0713874f6f0c8b46

  • SHA512

    3478a2abd19a9a9361d17b4c61575a49dac58e9b8fd60d387f7edc6336e467657539880ccfcaa7b07fad70cd679dc1633a91012a5c4eaf98c18e72df34802fc8

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAe1ftxmbfYQJZKHISZ:7I99DEWVtQAeZmn0H3

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 108-316-0x00000000035F0000-0x0000000003721000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections