General

  • Target

    2308-393-0x0000000003290000-0x00000000033C1000-memory.dmp

  • Size

    1.2MB

  • MD5

    2028294c9df918b1aa896d5b5def4c25

  • SHA1

    1f43878f79a918c8e46b8c353e990220f0c9c29f

  • SHA256

    6a5f9d54372df39cc25315fee77f458d288b4b90bcbf5e46a36435d0dd1c911e

  • SHA512

    eef61a18f652e7c38e4bd2c97b9728ca799796cb83bf433d5f73e71dcc00c983c7c77b43ef45047125c9617e48e624d553fcb7a30d78da81c22d746712093ce0

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA81ftxmbfYQJZKdcd:7I99DEWVtQA8Zmn02

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2308-393-0x0000000003290000-0x00000000033C1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections