General

  • Target

    2104-81-0x00000000032B0000-0x00000000033E1000-memory.dmp

  • Size

    1.2MB

  • MD5

    34a448eb96fca7b86dcd060c248fe00a

  • SHA1

    c7b695df2922d98dfddab6c56d7b7afe63157812

  • SHA256

    c133e4cb1b62adc95538a7c27230e70b68e41987c27cdab5d446d0d4a8e55de7

  • SHA512

    ba264b14675d15875df07212cdddcb14f0a3d8ec323a73f25b2c03c5b5bdb29d91e78772ea8c5a6bb56fb3627335e3c58d9626d923d0daac2738f40b7b496393

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA61ftxmbfYQJZKX27:7I99DEWVtQA6Zmn0m

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2104-81-0x00000000032B0000-0x00000000033E1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections