General

  • Target

    2264-472-0x0000000003580000-0x00000000036B1000-memory.dmp

  • Size

    1.2MB

  • MD5

    c5113cb79234b899450c469d403d9ec5

  • SHA1

    ee32090300b3338ae4171ee9492e5623f1b05948

  • SHA256

    32ad84e569e0592be7b961ade458dee4cccb8bd3c30a271aeb3c343d39b1ad3b

  • SHA512

    9d8cd577b380916c18a1dbb7579432c5f5e245a4a3cb066b13e05d5d178a803d772ae6b875af3b4829ba87f49a2563ef339b48a7ea95bdac2018eab0fa81d87e

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAX1ftxmbfYQJZKwTO:7I99DEWVtQAXZmn0m

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2264-472-0x0000000003580000-0x00000000036B1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections