General

  • Target

    2088-101-0x0000000003550000-0x0000000003681000-memory.dmp

  • Size

    1.2MB

  • MD5

    f57f26c1fa1425e6ef6942c6ed4fa7e4

  • SHA1

    3edd9d0eb38c86a377e8418b7169b510cb251ee8

  • SHA256

    82618c2239ea848d8277ba3d99a2e5c0ebb9d7e4df087986b0bdce4daed9273a

  • SHA512

    edbec12c5e5ebe370f20eefe33a7835b124fa1c1bbdd1166f9c5ac9704fa2974c6708d1d805a0955c1d7ea0f86be984434bba35b2cd25db7d2298a88e3a1d9c1

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAo1ftxmbfYQJZKYgE:7I99DEWVtQAoZmn0N

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2088-101-0x0000000003550000-0x0000000003681000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections