General

  • Target

    2060-1049-0x0000000003150000-0x0000000003281000-memory.dmp

  • Size

    1.2MB

  • MD5

    aa51ee9e6163c11573206a45b883bd6b

  • SHA1

    67ac947fa4c478292f63b7de704b7b536372c85a

  • SHA256

    39fa661651f659960b96488bd6e5736849e3483aba6261702b35c80ba5db7efa

  • SHA512

    da00372d939b5a87b066b61c9dd20efc4c73ea0b1002d5aff2ac02fd570e1b3b61d27d3a12697fdd4a0bb162f4013775268198f0d563256976e0ef04ba5ff8da

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAo1ftxmbfYQJZKVgm:7I99DEWVtQAoZmn0a

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2060-1049-0x0000000003150000-0x0000000003281000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections