General

  • Target

    852-282-0x0000000003630000-0x0000000003761000-memory.dmp

  • Size

    1.2MB

  • MD5

    0d53ee619c230110552829e4f9a73289

  • SHA1

    75b213aa2baecaf6628a3bc3d75bc2751421bc8e

  • SHA256

    fa13a216ac95581fa1e0a9f9b9f00f3a920bcf2293b2c36f40a37935b1c59afb

  • SHA512

    dca403d213b8aa53048a46832346825d773f51323c1e4c34d385c653ba9673795802f7a106bfdec3e36a6b10ce22f2ec9bd828b46496e3f82d7da49586283193

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAS1ftxmbfYQJZK5OZ:7I99DEWVtQASZmn04

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 852-282-0x0000000003630000-0x0000000003761000-memory.dmp
    .dll windows x64


    Headers

    Sections