General

  • Target

    2264-327-0x0000000003830000-0x0000000003961000-memory.dmp

  • Size

    1.2MB

  • MD5

    5f502ef30ba14b8702319dd68cfb6b14

  • SHA1

    c01d785897a5627e2d5b1cca374bb9ebaf4dacec

  • SHA256

    15d9ca008ff11579bef885f59105d642c5a43a4470028401416a0bdd243540f6

  • SHA512

    230ea1f60b1e50d7bba9a5e986559dedadfe2ce046e35c31ec849dee80a43f447a9b295df90dc36d519d6bed4d19081bbe9e086675ffbf024e89af5958c5203e

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAy1ftxmbfYQJZKpuM:7I99DEWVtQAyZmn0I

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2264-327-0x0000000003830000-0x0000000003961000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections