Overview

overview

10

Static

static

10

1572-81-0x...ry.dll

windows7-x64

1

1572-81-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1572-81-0x00000000041B0000-0x00000000042DE000-memory.dmp

  • Size

    1.2MB

  • MD5

    095fe12c9f2278bf1adae7d93db398f4

  • SHA1

    78a36ca62c5151db1d6a344617d54b8969479a3c

  • SHA256

    fdb91548ec7370c32ed35d8ae40a52cfa039e4dcc89e203cc181d988b24accf1

  • SHA512

    29a303cd3b18a57efa94b55685f3ee2b2dc3e4e8fc664bb8cfddd7fca4431db685fbb41844c7ccf2365ba024124f659e27660bbc78f1fd88b8738435f5410f52

  • SSDEEP

    24576:mRzZLwJgaf+HLBKKbvDhWXBFQWJCuoEf8rLAiRX1wyCN:ELwJRf+HpGQWJvfmFub

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1572-81-0x00000000041B0000-0x00000000042DE000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections