General

  • Target

    2348-254-0x0000000003200000-0x0000000003331000-memory.dmp

  • Size

    1.2MB

  • MD5

    ca7e95e48b0a2a392d2b3fbd9c312669

  • SHA1

    f91c58b6cd999503d9eee6531034a70c3f0b5781

  • SHA256

    1b393e2c54226e327cdfd2ebf8f1570bf620369fd6bd38c5325a4440db8700a2

  • SHA512

    e8a11d3d6e1cb440df363fc61736b068ba4082dc223c57d0ac847e7ba8ae5713e303b9476fa12ccb549214d931a42d47df83ca232ea1d09e5a2325170f338d33

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA/1ftxmbfYQJZKInAry:7I99DEWVtQA/Zmn0InO

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2348-254-0x0000000003200000-0x0000000003331000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections