Overview

overview

10

Static

static

10

2624-299-0...ry.dll

windows7-x64

1

2624-299-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2624-299-0x0000000003A60000-0x0000000003B8E000-memory.dmp

  • Size

    1.2MB

  • MD5

    8d25ee8d47a0f04f6c23dfa4a5093c89

  • SHA1

    f9ddf8c57180da103c1d0ced7c77c9cd7310a768

  • SHA256

    ab919507e71168bf4294b3c14028b0b9ebb2aa6dbbf1478900fb36006b6886c0

  • SHA512

    f2d93a480f816a1ae7ceca8a8e0bf04b4107435d79a1fd45f5692f87ba0fb683b1112f3b3b8d97416da9e3bb81db572a240ba274b031487b65746cb8f4d8e1ab

  • SSDEEP

    24576:mRzZLwJgaf+HLBKKbvDhWXBFQWXCuoEf8rLAiRXigHaYuYCN:ELwJRf+HpGQWXvfmF+t

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2624-299-0x0000000003A60000-0x0000000003B8E000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections