General

  • Target

    1032-399-0x0000000003590000-0x00000000036C1000-memory.dmp

  • Size

    1.2MB

  • MD5

    9abb43b2aaac74d70dde9266c4dcc102

  • SHA1

    6ed6082826903928445443f030bf0ddb28526b1e

  • SHA256

    c57b1e471ee5e67982bd8f986ccf3aeed4933fb07bc6035868b305fd807f6c65

  • SHA512

    de2319dcfd9795540d8c0c659aaf9b368afc2d33f4c3c8e76d90e3d7debabd7f39976baa6cde06d51ddfcabb30a9bc1b43d93b12245c0c5e234be33fbc37cc42

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAs1ftxmbfYQJZKYsE:7I99DEWVtQAsZmn0p

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1032-399-0x0000000003590000-0x00000000036C1000-memory.dmp
    .dll windows x64


    Headers

    Sections