General

  • Target

    2432-351-0x0000000003470000-0x00000000035A1000-memory.dmp

  • Size

    1.2MB

  • MD5

    aa252e0eda22ed0f9fdfce410b874e08

  • SHA1

    1267f5af7e935729a5d3e81c32f3f0ab78d9aedd

  • SHA256

    c8dc3bd8cca1a97c51c160fa8002945095a032d0eaf10bf4938f87e057521041

  • SHA512

    07710ab358e468aee53e7b1e84afaa686d89449f2181ab81311e6dce007065ceb7618df466998719b250fa00326035933d4c04ad52d0fb64784a0c5a2e242c17

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAm1ftxmbfYQJZK96B:7I99DEWVtQAmZmn0g

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2432-351-0x0000000003470000-0x00000000035A1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections