General

  • Target

    1184-411-0x00000000038E0000-0x0000000003A11000-memory.dmp

  • Size

    1.2MB

  • MD5

    460f4629216244aecb0b9f0bc419edbb

  • SHA1

    10fceab7b77cfa3e9d7facd3e9d77b18490411e5

  • SHA256

    0d9ce19658d1a8590c7946af2b77f9e4ff98d5f13d6c5bd7cbbfb05a6e669008

  • SHA512

    b34dca4da9844ed43134e571447bd4c2de1e1540c856d225a5f8251503b330e21835e3139c469b851b1cc0c7e3a6e2efa3453e4d90f051354d65a5e3983a39eb

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAJ1ftxmbfYQJZKg+RD:7I99DEWVtQAJZmn03

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1184-411-0x00000000038E0000-0x0000000003A11000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections