General

  • Target

    2452-242-0x0000000002490000-0x00000000025C1000-memory.dmp

  • Size

    1.2MB

  • MD5

    baa161751519f9f66927870068fddeeb

  • SHA1

    c5678c050ea4016c8656d0e6d64fc75e03163755

  • SHA256

    f3fda3a5b8bddd75899f05a2310f8f20d2df6db40f7aebd6e25cf9a1e5117b89

  • SHA512

    42d2ff20c0f4e128564cc99907eba32e2900a1e865d57dd955eba43e66ffac88301bfbc5b4f3b3fb8029781597050a964418c61d1dea7d92467dc00e74b3522b

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAJ1ftxmbfYQJZKcvt:7I99DEWVtQAJZmn06

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2452-242-0x0000000002490000-0x00000000025C1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections