Overview

overview

10

Static

static

10

292-1240-0...ry.dll

windows7-x64

1

292-1240-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    292-1240-0x0000000003570000-0x00000000036A1000-memory.dmp

  • Size

    1.2MB

  • MD5

    c5e24b772aca96bc72fecb7bbfea1509

  • SHA1

    f4acf0a81b4762b0fc578a64eb361b031dec71cb

  • SHA256

    33f8c7dff55c744c2e20b4be4c5804d3edb012f4691d813e1099c7a0d45f7643

  • SHA512

    e8914a4cf509dedf3e9e6928b1d99b6968dd8b821fe5d90d9acfa30bea3ab07dc574407c71b4d7385977073fdf239deeca29a5db29ee85fe01202db78b931be2

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA21ftxmbfYQJZKCq8:7I99DEWVtQA2Zmn0B

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 292-1240-0x0000000003570000-0x00000000036A1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections