General

  • Target

    1032-387-0x00000000024F0000-0x0000000002621000-memory.dmp

  • Size

    1.2MB

  • MD5

    456aff159fca6da4ec0946f6be3af188

  • SHA1

    8619e9a46ff927be5b225e1da9ead2a74a8b35f3

  • SHA256

    491e43c08c633da53e34f5e7a7023515539ce2392456ed4302cf1aa794a4dfd0

  • SHA512

    49f95ef842214280ac4cd467992398d2a34dc0c84aca508e328025d94ac253357a9bead5f9ff810d7ea38c3335f3a81c98ee49a925f2abf0b558137faea96347

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAL1ftxmbfYQJZK9kFt:7I99DEWVtQALZmn0K

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1032-387-0x00000000024F0000-0x0000000002621000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections