Overview

overview

10

Static

static

10

2856-1265-...ry.dll

windows7-x64

1

2856-1265-...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2856-1265-0x0000000003690000-0x00000000037C1000-memory.dmp

  • Size

    1.2MB

  • MD5

    ff51fb266aae889fe1624a7abb2de934

  • SHA1

    a5663fcf62460e9b5babf8826e49fd9b5ee9dc15

  • SHA256

    2c6d4402a251f34f1439b31519704e3d5c8d23fcff76ef9efea0c4a4875e299e

  • SHA512

    b010114843d705a0d64035895528ab6c396d5831989a3c61e8b3e86e54de000d7287b254d73c2500bd096b603a45632c33dde8355ed341f1eccb9f53ff6f2689

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA81ftxmbfYQJZKvc6:7I99DEWVtQA8Zmn0k

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2856-1265-0x0000000003690000-0x00000000037C1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections