General

  • Target

    5364-651-0x0000000002A40000-0x0000000002B71000-memory.dmp

  • Size

    1.2MB

  • MD5

    a5f0a2178825b3106e1eeb4ff28aa43f

  • SHA1

    b1449717b92d8d2fff89a0787cef6702f9df2076

  • SHA256

    09f1380d02627fd46da8a59dc498aa1a02482042745a4d479bfdb5e3b3c46847

  • SHA512

    62816d9664ce22465851f8b29290aaaaaac3460f93999338c1af3d6782ea32f153f840a15dded9f29af1d04162e6cc975a40dbd3432c1a74161c9f6b0d6a0623

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA21ftxmbfYQJZKqYV:7I99DEWVtQA2Zmn0b

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5364-651-0x0000000002A40000-0x0000000002B71000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections