Overview

overview

10

Static

static

10

2272-1138-...ry.dll

windows7-x64

1

2272-1138-...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2272-1138-0x0000000003770000-0x00000000038A1000-memory.dmp

  • Size

    1.2MB

  • MD5

    6028cd6a5c875feae1a9339abe77fd39

  • SHA1

    c598b9daeb75cb76e8a176235bfb1bcd951994c0

  • SHA256

    bfc42afbc672bc0790a2d77266cd85b797721dc8db77d05736e4a24026a0404b

  • SHA512

    8bafc380f532e9ee6fa51ac2826661f08c843c3edd4f0fc9d336c88a1eafcb1a6ed1cf7e0524079cf5fca8f97fe3111b5474f1c90eeb3caba4223344fdf1b074

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAW1ftxmbfYQJZKHaKV:7I99DEWVtQAWZmn0J

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2272-1138-0x0000000003770000-0x00000000038A1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections