General

  • Target

    924-385-0x0000000002D90000-0x0000000002EC1000-memory.dmp

  • Size

    1.2MB

  • MD5

    761e35652b45f3c48b7fada6947526f6

  • SHA1

    9de15cafed175c10c8b2246bc8d30031da4ccca6

  • SHA256

    f450c83947a0c1f0c64dac3b8b922201387f047c28955a4b23479839eef6ce8b

  • SHA512

    9cbe10eb80e41ed134549f24888ce19675423d4ce8bb84cafa2e30b288cd6e33edf1d194f71db2c4be38c18f81e1832b2666d05fdc10c6d339bb7a7e73d757a1

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAZ1ftxmbfYQJZKRfZ:7I99DEWVtQAZZmn09

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 924-385-0x0000000002D90000-0x0000000002EC1000-memory.dmp
    .dll windows x64


    Headers

    Sections