Overview

overview

10

Static

static

10

1620-605-0...ry.dll

windows7-x64

1

1620-605-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1620-605-0x0000000003B30000-0x0000000003C60000-memory.dmp

  • Size

    1.2MB

  • MD5

    fdaa88618c09581cbbb10403c2cc715d

  • SHA1

    95a9b00871a73c5577efb82ccaaac96643f21b60

  • SHA256

    9c2689995c91faad726feba933ffc326c203e1816520bab21d7a7b753c6a3c7c

  • SHA512

    32de5455f5d5a5d94d3f3d5caee17eac371a4e9fdc2c731ef922532f5b8cf37c38c4f4a981bd6e5047a1c159a58f5a6c0f38ab0036038d57353d89730d95140a

  • SSDEEP

    24576:xWtwofqzi3XR6dF0TkgXZet4QRtI8pTAhspNd00IXC:cXqzmXR6tYQRtTAGRy

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1620-605-0x0000000003B30000-0x0000000003C60000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections