General

  • Target

    2304-463-0x0000000002BC0000-0x0000000002CF1000-memory.dmp

  • Size

    1.2MB

  • MD5

    83165001041dea68dd243b961c88629c

  • SHA1

    90183e3baca2960a4b051bb5d03eaa8152df91bf

  • SHA256

    625ae530084023eaf1a9dfb766f5380349679041ba612a8ee8199cc5edd65413

  • SHA512

    b9e01f96eb8439532543a0d35c7237eb7f574122168a829f111373c3df95d05831ddb5f89654790a7dafe3b308588d394fad84fda2f2c8555d31658bffb24522

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAO1ftxmbfYQJZKYAm:7I99DEWVtQAOZmn0J

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2304-463-0x0000000002BC0000-0x0000000002CF1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections