General

  • Target

    4440-651-0x0000000002F00000-0x0000000003031000-memory.dmp

  • Size

    1.2MB

  • MD5

    23173e1d7de85e7cf635b7dedba92b5a

  • SHA1

    c4fe93e4e2c985b75d5e4da9a72338173050d026

  • SHA256

    833bc98a86ee52ca2db509cc3477627bb2b5003993437858e2d55a0b96f9049b

  • SHA512

    6d8a0302750434493d286de1d5770d80a04cac845251bd2e007d712532cb0d4b9b5ebe4fa53ef404f8fbfa210312de3cdaf6dc4ea8fe1b47348db775e46efa20

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAP1ftxmbfYQJZKRzv0:7I99DEWVtQAPZmn0V

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4440-651-0x0000000002F00000-0x0000000003031000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections