Overview

overview

10

Static

static

10

2972-81-0x...ry.dll

windows7-x64

1

2972-81-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2972-81-0x0000000003170000-0x00000000032A1000-memory.dmp

  • Size

    1.2MB

  • MD5

    0261bd3eab360dcee3f95eb4824c8306

  • SHA1

    7f679698d1fc5e3f56c94a0e4c991d1d4d8701c0

  • SHA256

    d34115ec47ba449245f54d8efc9e27ea41876b56117b805a4a906a706e3c42d3

  • SHA512

    14a7cc1fa1d85723ff38806d4e77c85fc5aa42d02201552adebf1604685c7e74237c50c3ab5351ddbee50efb566801029fd61e9ca31095a1afc156f8ec7c37d8

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA21ftxmbfYQJZK0q2:7I99DEWVtQA2Zmn0D

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2972-81-0x0000000003170000-0x00000000032A1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections