General

  • Target

    1068-313-0x00000000029B0000-0x0000000002AE1000-memory.dmp

  • Size

    1.2MB

  • MD5

    a902c5ef2210c74523041ea0bd9f3a70

  • SHA1

    9e1b578dc9d183d1838036219b990f996975a0a7

  • SHA256

    230c01dce21ddb43ecba1d0e91595f0585da7fa55072f420ddd033300b20790e

  • SHA512

    3afb0462ad0c46e06b0d38ad448acd1b523966232d007191f6f0bd01b709f6472820a991ec39ea80300ec68f063cf8cd0facf278f1ea93bf00cada6418b11f36

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA31ftxmbfYQJZKEhU:7I99DEWVtQA3Zmn0U

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1068-313-0x00000000029B0000-0x0000000002AE1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections