General

  • Target

    2212-81-0x0000000003760000-0x0000000003890000-memory.dmp

  • Size

    1.2MB

  • MD5

    12ee8fa873073823c5065a5a651430f7

  • SHA1

    ecb011cbd0971c27acf341f28b0341f52ecb21bd

  • SHA256

    7561b921a52f151ee1d164bdd8fa1cf46cb7b7e39003df463ae4635e2a44b6aa

  • SHA512

    ed8390f44395459150ffe20b3ce6b95cfc089127223c839bcbeecee27da54aecd3010775720707e3a92fc6284abb249d5312332279c1fdd25f7598ea01a7de34

  • SSDEEP

    24576:F1Ao66zsPiB3gcrREGyGq5/kQWK+sI5iitc3Itv3cGwSvuu:FW6zwiB3aPCQWK4iiLvMSz

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2212-81-0x0000000003760000-0x0000000003890000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections