General

  • Target

    2984-2232-0x0000000003250000-0x0000000003381000-memory.dmp

  • Size

    1.2MB

  • MD5

    c963f6e99bced1c74de0e29e324303ec

  • SHA1

    f2d1ad049abdb156e70fd4eec50eb2ecacb85be1

  • SHA256

    f44d64e3b435c54dcd6781d5609e8ee72c90057cdbfcb5d0b2194d479bcd0cac

  • SHA512

    61f47aa170e192c8efe575d57135ae848ad39ca789512efd42a59bf7e1ef4c7b5b1aa014f2c17701ba5fb80e1931216980ed81efb0da0988d47395df2394dce9

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA41ftxmbfYQJZK/w3:7I99DEWVtQA4Zmn0Y

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2984-2232-0x0000000003250000-0x0000000003381000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections