General

  • Target

    2612-631-0x0000000002F60000-0x0000000003091000-memory.dmp

  • Size

    1.2MB

  • MD5

    a768ee4cabdc34d37f7a60063ac0ef75

  • SHA1

    82f85535cc6a89ccbd7ababc015e020836188abc

  • SHA256

    2ad217bc3f65206cb48a096e909544efa3bdde475852033824a7c56a5e9fec0a

  • SHA512

    560122e2c97b3dcc20d4d6654e05cf64b57c368dfc97965d75f6c9f812529dc94ebe416dacf807e2ab9c66a03adf5b9d142b7d51738fa3f7808b1ec8ae62b110

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAx1ftxmbfYQJZKx6U:7I99DEWVtQAxZmn0g

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2612-631-0x0000000002F60000-0x0000000003091000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections