General

  • Target

    2492-270-0x00000000032A0000-0x00000000033D1000-memory.dmp

  • Size

    1.2MB

  • MD5

    2db1cfa5478e724b909277d978284e25

  • SHA1

    d6d20e98528c10760a1945bb2a393ea98a5dde1b

  • SHA256

    877a8f17c46ca07e67ef2ec3e820d42e45de0ca618896f4e250159d3a2028544

  • SHA512

    2e7234c5513a5e1f59495fbc2cbcaf9ceb78bcff5214513c38e150ae22ba7e2a3a054639bb68ea50a944b5acb0369105d816b9644d848aef3ad592c50179e11b

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAV1ftxmbfYQJZKe9g:7I99DEWVtQAVZmn0C

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2492-270-0x00000000032A0000-0x00000000033D1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections