General

  • Target

    1044-337-0x0000000002D50000-0x0000000002E81000-memory.dmp

  • Size

    1.2MB

  • MD5

    1f579dfc05280fddeb7f2092ebe2f3dc

  • SHA1

    24774a6b13aa5fba606c134f85b43fa894f1c917

  • SHA256

    041a5a07009a242534cfb2f2ce7bc426f3c87f97eb0ec81b027029cccf811da8

  • SHA512

    d633a66d6be0b0314bb78dddfc1dcdb20f80255f8232ac064d6761143e385027ccd43d32c8d82e4f8721f2a3136345696493c3cf9fbd42f25ef34bc22540c415

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAl1ftxmbfYQJZKKWbL4rY:7I99DEWVtQAlZmn0HP4r

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1044-337-0x0000000002D50000-0x0000000002E81000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections