General

  • Target

    4412-267-0x0000000002C60000-0x0000000002D91000-memory.dmp

  • Size

    1.2MB

  • MD5

    d9d94009c7bc89aed86cabb708d980ba

  • SHA1

    ac7a55b252c24d2ebc009833ef3b0aca689dc717

  • SHA256

    0744976d568ac5d565964d6936b2f304900046bca1d2559c961ee924f399154b

  • SHA512

    94066a2aa938d572221a62b7772d8a016e0bb619f96bc448e3c25e9881c8b745337edd5289c7b78d5758481b1ced5f63cb573549a9db12d6d4673c955ca87332

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA01ftxmbfYQJZK0K4:7I99DEWVtQA0Zmn0v

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4412-267-0x0000000002C60000-0x0000000002D91000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections