General

  • Target

    4660-326-0x0000000002F90000-0x00000000030C1000-memory.dmp

  • Size

    1.2MB

  • MD5

    5d123eb7ba63db623a28fb1f263704a5

  • SHA1

    b63230ac96200a3891fb8e93c5b53d196d7cf6ca

  • SHA256

    6cf43b0da8979031c3d5b14ac8ed9ecd4b2ebeec522f05315d2604f24009828d

  • SHA512

    b0a3533be3d946570bb0a94e31adb3a3d5619467c3814827293c71762a8d44d73efa47e748694eef73177f94c5d8f64d9ca0343a5e4dd97cc29e66f344ccf8b9

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAM1ftxmbfYQJZK+L0:7I99DEWVtQAMZmn00

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4660-326-0x0000000002F90000-0x00000000030C1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections