Overview

overview

10

Static

static

10

2944-1210-...ry.dll

windows7-x64

1

2944-1210-...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2944-1210-0x0000000003700000-0x0000000003831000-memory.dmp

  • Size

    1.2MB

  • MD5

    1d58584c71bd8bdf4bc09b432741c942

  • SHA1

    81a76158864025c262940fbc3e4e406b27af37c2

  • SHA256

    1b538c8c3a25c5506a63bb66ffc8881c272d9ea5fb751353c583e3937934571a

  • SHA512

    b77e1cc495c30c65f48937411af609fd7f834be9e6ee3f39bcbdaad2772bc74108bcd4c4f3614eaaaf57818f44ee4848e92e6bd31368add7d74d0ce5ff48e3a1

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAP1ftxmbfYQJZK17f:7I99DEWVtQAPZmn05

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2944-1210-0x0000000003700000-0x0000000003831000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections