General

  • Target

    4376-241-0x00000000031A0000-0x00000000032D1000-memory.dmp

  • Size

    1.2MB

  • MD5

    12a93cd1c788d4b5fd7a6a2521425c8d

  • SHA1

    fd67f69265dc849049566510b3a687be2ba6ca4f

  • SHA256

    2bcfcd61a7cbd8b20dc7a2ea6c6012cc9eb1f73e31ef90be19844f2ad712a3b6

  • SHA512

    f8b9d84df391cc80fe6040b9d766a0ef5c1d4344ef4a70070dd24bd0c90d1e3e5702909b9b81c48debbdc0cf98a346c97de46006aeb196c95bbb578f3b09155b

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAF1ftxmbfYQJZKJt6:7I99DEWVtQAFZmn0z

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4376-241-0x00000000031A0000-0x00000000032D1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections