General

  • Target

    2288-101-0x0000000002D30000-0x0000000002E5E000-memory.dmp

  • Size

    1.2MB

  • MD5

    02929258c2cf5f0348eff03c574bd407

  • SHA1

    bb21db4c108964cd1d39f845b07e2cb8f7240dd5

  • SHA256

    2cd3c43a737bede0ac4994a59f98f63e001fddd7c4186543f619e74239b6a5a0

  • SHA512

    b64a147641e04c22a7a6daa35b9ae83aa064fdd84f59d2de6618b8c1336fda8e3d2de015781322110d5d8c219e51bb6bfa744f1c74800744a658ba1ee155564c

  • SSDEEP

    24576:mRzZLwJgaf+HLBKKbvDhWXBFQWfCuoEf8rLAiRXu+SCN:ELwJRf+HpGQWfvfmFl7

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2288-101-0x0000000002D30000-0x0000000002E5E000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections