Overview

overview

10

Static

static

10

5024-373-0...ry.dll

windows7-x64

1

5024-373-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5024-373-0x0000000002E60000-0x0000000002F91000-memory.dmp

  • Size

    1.2MB

  • MD5

    42064e4fa2ec2da365a361d535268f28

  • SHA1

    244f633678589e5b0e0797fa1eda82a93da1f67c

  • SHA256

    9a269b0f7faf6ce7c99a407e5d6108724abd93ce54719f824bf477f997445ebc

  • SHA512

    ab48358241f3438400880bad142393b3eb98a019b784c1b8d75223decd9fe1bfc0d69fc5991c56e5236124bd8b4d9466ad8942d140fe765c9ea75acbad456829

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAU1ftxmbfYQJZKYe7E:7I99DEWVtQAUZmn0T

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5024-373-0x0000000002E60000-0x0000000002F91000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections