General

  • Target

    2444-336-0x0000000002DD0000-0x0000000002F01000-memory.dmp

  • Size

    1.2MB

  • MD5

    156351190b3d1da8812e2ba724e2d86a

  • SHA1

    6d81087ec6a94cdccf9211c173392de9db918df4

  • SHA256

    5a0d6253ca202ddf9fcf09aa3de480c6cfdd3db6edcc6ad447f9c81639904d59

  • SHA512

    206a268de8dd8a29508eb4c7f3ef78f3086d1cb3d49abbeef6a17473b49eacabd40c288874fa4600a7b92e33b3a021b21d3e1b6bd9a8fe5cda875046d76b5972

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAt1ftxmbfYQJZK7zW:7I99DEWVtQAtZmn0n

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2444-336-0x0000000002DD0000-0x0000000002F01000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections