General

  • Target

    1988-662-0x0000000002BA0000-0x0000000002CD1000-memory.dmp

  • Size

    1.2MB

  • MD5

    276ca394e124b6bf12f79d6a6da9ef21

  • SHA1

    22e6dc43d83c6cd7f3acbaddd811214d0bcfdd24

  • SHA256

    5ab5c2c199cf63dc4abe4baf4b4bc66830e397597bacc7fc535beab68d08de79

  • SHA512

    3851917373067e7c9f69b42e31ec5cbc339132806c7be13e135fa95c18676abdd78f1a63fd2b8d5aa73ab56af4ed53e1c963b4b4facd0c2c70a4566d65902cdf

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAo1ftxmbfYQJZK2OAr:7I99DEWVtQAoZmn0J

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1988-662-0x0000000002BA0000-0x0000000002CD1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections