General

  • Target

    1156-1031-0x0000000003300000-0x0000000003431000-memory.dmp

  • Size

    1.2MB

  • MD5

    bac80f4dfee9749389d352fa6f743c77

  • SHA1

    23ac51f750cd3ca5c0e909d0c107255a3eaa5489

  • SHA256

    277e4898b067862d17af2beec784fa24b9b4924e4fd0796139ad04d0e8ab6b69

  • SHA512

    a3d3649fbf072fef8fe70a24c1b7fec3a66ebcc598c58196391da0cb7ed6a68c4e957acf0e1de6f10b1337233ccacfd355d3d039b53c7e24ffa8833833e48a85

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAP1ftxmbfYQJZKs7W:7I99DEWVtQAPZmn0S

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1156-1031-0x0000000003300000-0x0000000003431000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections