General

  • Target

    2464-81-0x00000000031E0000-0x0000000003311000-memory.dmp

  • Size

    1.2MB

  • MD5

    5066240f7cc324b98f81b293bef64a51

  • SHA1

    ccbe5f0069f30c97f746b6ef520c3e74b6372197

  • SHA256

    e42808afb72390898e35ffcc5566140e7d4a0362a07b323d4df014e4107228b3

  • SHA512

    b7c5e93c34dd562ce72c7ec56a2e590cd6e3149d16d59874adb09e887cfb565ce3fe8ef0eb07ba2ebb33514f0019d6f9e5eacde02eb1a95a83fde489491de9d2

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAZ1ftxmbfYQJZKJBb:7I99DEWVtQAZZmn0H

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2464-81-0x00000000031E0000-0x0000000003311000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections