General

  • Target

    3004-12-0x00000000029E0000-0x0000000002B11000-memory.dmp

  • Size

    1.2MB

  • MD5

    4d87ad4027c524cda290256461f92782

  • SHA1

    a57e364de0dd86c797683e02222c59b3a9b65b2c

  • SHA256

    07082f918767f070c0e196bf70e0cec60a28e5f05f7efed5edcc7c5b0bab0f28

  • SHA512

    159865e99549662badebf4a5e25c7c951b4c30292c5f203be6fd246eaf052206674fe51625f036ae5d3ce9837fdbab4a919c017979be5d286aa91af290320d60

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAs1ftxmbfYQJZKzyD:7I99DEWVtQAsZmn0O

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3004-12-0x00000000029E0000-0x0000000002B11000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections