General

  • Target

    2124-381-0x00000000031C0000-0x00000000032F1000-memory.dmp

  • Size

    1.2MB

  • MD5

    6c401f56bddab07da3dfcb4dafe0781a

  • SHA1

    e09093bc9000047b9f99d4512d217536f541cc61

  • SHA256

    6279f835c708dffd6814c290d5681b1229c52a452526e8ea41f86cf32d49ffe8

  • SHA512

    23188252d3229f0f3b56ad319f841887a246721876c61f2ccaaa4d28e023366618e32ae7f2adba12f82f384f5aa9373af6ce0e2add3facee1427432b4e8e773b

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAr1ftxmbfYQJZKunP:7I99DEWVtQArZmn0w

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2124-381-0x00000000031C0000-0x00000000032F1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections