General

  • Target

    2860-176-0x00000000037B0000-0x00000000038E0000-memory.dmp

  • Size

    1.2MB

  • MD5

    9ddf09a863eccba8fe244c8ba5ccdf0b

  • SHA1

    66e3b7dcda62f0d03cdd3c5e396e3e1bbbe46dc3

  • SHA256

    aaa267abec8216162cca2075cd22cb11a1bbe0cf7e32c7da9f7e6225c7ecc229

  • SHA512

    a4dd0e06c964c48718a0e96897156de9652b342e76a2971f9b697d2565e83acf457beff27e50072a6be980c4241e50d86ab418c847a963b34788c56706a50ea6

  • SSDEEP

    24576:xWtwofqzi3XR6dF0TkgXZet4QR1I8pTAhspNd00D992:cXqzmXR6tYQR1TAGRR9

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2860-176-0x00000000037B0000-0x00000000038E0000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections