General

  • Target

    2264-342-0x00000000032B0000-0x00000000033E1000-memory.dmp

  • Size

    1.2MB

  • MD5

    cd92e2670c0640d25d02c788eea5b422

  • SHA1

    230db5109b7db30ac72aba4fa8934436f0d2d894

  • SHA256

    861288c14678a2e139f0da1495a7b4a79dd3ebd53b0a98fea8f289e30c8441c2

  • SHA512

    9b412f884e304a96a673b9896c4e24fe7a75c2ba6c1949c2c2c8d8f21c633e5248fbdfab2b331d863ab5c72493cb64b6e2e9cdaaf7f50268f916afd2f7a5eee5

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA61ftxmbfYQJZK+u2U:7I99DEWVtQA6Zmn0W

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2264-342-0x00000000032B0000-0x00000000033E1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections