Overview

overview

10

Static

static

10

2856-347-0...ry.dll

windows7-x64

1

2856-347-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2856-347-0x0000000003660000-0x0000000003791000-memory.dmp

  • Size

    1.2MB

  • MD5

    05e054eea08b3efa14da615cef003760

  • SHA1

    be8bf5f8236be896ca0be9932f7cc8eea8683b03

  • SHA256

    81657a64a85c8f56dabaa33fa6d912be6bd5f97d1e3312fc3ed5fde2f5169d35

  • SHA512

    82df6c57dbb82086a0bf29f04dcf3a6584897c9fc79cb144e34e7cf9d0a1410d5e7082a4abd9ec1e118c4fa8dc557cc4fa60923a3eee72a7f008f2e35cd2dde3

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAh1ftxmbfYQJZKL5Y:7I99DEWVtQAhZmn0d

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2856-347-0x0000000003660000-0x0000000003791000-memory.dmp
    .dll windows x64


    Headers

    Sections