General

  • Target

    2460-81-0x00000000030C0000-0x00000000031F1000-memory.dmp

  • Size

    1.2MB

  • MD5

    663584b0578a2a7ecce671e1d53d3bee

  • SHA1

    e01fb3aebe9a6509aadead6000f35213b4b40a6d

  • SHA256

    57eb44d309017893438c817f684a8ed8677ef976b5353b956ba2045ef159943b

  • SHA512

    5a17b9678b3613de3d5a9375b73cc8c4c5f12c83241dc54aa70664bd39d86aac5f3d413968ad16fd8f74ddae734e8b1d07cb22edb03c2cf291ebae06f61effe0

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAb1ftxmbfYQJZKZ3y:7I99DEWVtQAbZmn0R

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2460-81-0x00000000030C0000-0x00000000031F1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections