General

  • Target

    1032-366-0x0000000002F20000-0x0000000003051000-memory.dmp

  • Size

    1.2MB

  • MD5

    33fa5ad9a7e7b49c76762650c7a02656

  • SHA1

    9cc02d54a5237492aab6b2e86f49ea5fbe892c64

  • SHA256

    61452d33fad4a7281f476a29c5b177f5a260f9617df7a105900b568952ff4a8f

  • SHA512

    6e60303d1f77bda91d8ab6fdac8e74ce10fb87c10bbd9573ebb8e5b38dea34d0db7a302125cd48109f2d963fda2485767545523a0f3189e87b1efc7321f8185b

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA91ftxmbfYQJZKHG4:7I99DEWVtQA9Zmn0m

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1032-366-0x0000000002F20000-0x0000000003051000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections