Overview

overview

10

Static

static

10

2956-558-0...ry.dll

windows7-x64

1

2956-558-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2956-558-0x0000000002C20000-0x0000000002D51000-memory.dmp

  • Size

    1.2MB

  • MD5

    32a9fa5bcaaa90e0255c55f0dadff8a5

  • SHA1

    31ee552e3c8e9055d2997863140d79a65846e771

  • SHA256

    b321fd5a2cc9c8617e53fbd9de6bbeb53a4b7696c2874cabeaabeb1c735f9f6a

  • SHA512

    4d099f6fdf372a8f662ad2c13c0b6d709b962ceb09769aa12b3e25929bbfe128d9e7580dccfee52fa7f81b74f6bf82680ff2a87149390648ea04f850730cef82

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAQ1ftxmbfYQJZKTG4:7I99DEWVtQAQZmn0K

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2956-558-0x0000000002C20000-0x0000000002D51000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections