Overview

overview

10

Static

static

10

2392-433-0...ry.dll

windows7-x64

1

2392-433-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2392-433-0x0000000002F70000-0x00000000030A1000-memory.dmp

  • Size

    1.2MB

  • MD5

    a5b8d1d895224be6df7359f1cdda33c6

  • SHA1

    df406c3b2e4b699e36d8eb4be049a80bbf310ae1

  • SHA256

    78a7c5e3cffc25bae777b46b3fecd4a0294f629fb9fb1bd726ffb64e41751316

  • SHA512

    7434ff4b7c94a4ec81522d3c79411c665c1bf3ba1581b3cabb894d6d4dd369cab98149685a4ebc7f32d284ea7147b94e130c2d415bd4fe0cfed4bbec9049f596

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAW1ftxmbfYQJZKCJRN:7I99DEWVtQAWZmn0o

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2392-433-0x0000000002F70000-0x00000000030A1000-memory.dmp
    .dll windows x64


    Headers

    Sections