Overview

overview

10

Static

static

10

5992-1005-...ry.dll

windows7-x64

1

5992-1005-...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5992-1005-0x0000000002A20000-0x0000000002B51000-memory.dmp

  • Size

    1.2MB

  • MD5

    c5a922473165136ba3791d2ad050ea6d

  • SHA1

    fffcf7dec9a473646f60287a6a921e39b5190c97

  • SHA256

    f2c1fcda23d56628f83c2b56016c5fd4f56019e96b5e780a4d764918da96f2cc

  • SHA512

    1bef3277dda5a27fb4427ded569781238f056d5a466d5dc78250c5c6f04febe8ffd4f15a749da93efb0565847cb482b7aaf71fc35b9ef1ce8b509c2715c098e9

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAw1ftxmbfYQJZK4mV:7I99DEWVtQAwZmn0f

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5992-1005-0x0000000002A20000-0x0000000002B51000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections