General

  • Target

    1940-475-0x0000000002A60000-0x0000000002B91000-memory.dmp

  • Size

    1.2MB

  • MD5

    e6d57f88320c7ea2c7818b2f1f7fa88d

  • SHA1

    ae62fce749a2868104e3273d73b154bb1a92a812

  • SHA256

    97b210c6b3acc3c04a51f28b9d61e6bd455ca60a4d893b22f8baa98295aae6c3

  • SHA512

    e4aa5051b00023ad8f87a781e700fff48aedaefb0f4dfa03a3a6e27013dbe9e5279dc9877ed7426aa82b68ea755280d5c58bbeab5e70cdae4baee8663ac188d6

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAU1ftxmbfYQJZK7qv:7I99DEWVtQAUZmn0O

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1940-475-0x0000000002A60000-0x0000000002B91000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections