Overview

overview

10

Static

static

10

1392-449-0...ry.dll

windows7-x64

1

1392-449-0...ry.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1392-449-0x0000000002D00000-0x0000000002E31000-memory.dmp

  • Size

    1.2MB

  • MD5

    f3ad8440fcddb9521655e9e73a25b895

  • SHA1

    313bed2b066367a120e631628509e7a13bb1b9e8

  • SHA256

    569aa5959732e42fec881eb841b606fb6223d7df46589118d699d27fbac56f7b

  • SHA512

    f361d0f5a0a9fcf94943239b8ede41f97d48f5bd86b9df6fddf2b418ce1617ebaed8d906f95bee6cbd6c44e75aff69f89264989a2e6ec4a5388dc57a328d4088

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAi1ftxmbfYQJZKXEMP:7I99DEWVtQAiZmn00M

Score
10/10
fabookie

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1392-449-0x0000000002D00000-0x0000000002E31000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections