General

  • Target

    2268-417-0x0000000003360000-0x0000000003491000-memory.dmp

  • Size

    1.2MB

  • MD5

    ed1bcfa21bddbb04588f15e0abafd8b9

  • SHA1

    87fd979274f0460f237c37e43d9e4aa3c40bcfa3

  • SHA256

    ed5aacab8732a6c48d625c847d51f5c699424c0bf4e69bd0447e49484d367a50

  • SHA512

    b59b54172cce6057d0edf2dc924c4751fa93d928686b28cc060dd9990e3cee15f504a746b18b42bb55b32c9be0d4c168ca9b07b65e8fc6174938fec92c391cdc

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAx1ftxmbfYQJZKLpc:7I99DEWVtQAxZmn0t

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2268-417-0x0000000003360000-0x0000000003491000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections