General

  • Target

    2324-101-0x0000000003540000-0x0000000003671000-memory.dmp

  • Size

    1.2MB

  • MD5

    5aa1aa61ad3524a82e56d31ed5b77beb

  • SHA1

    3160eee898eca4b873c99c43c690dfeddd833f7a

  • SHA256

    40504e3fe94ab5e369129e9b0213e966cf57896fc5fe6ca80fab61613f77bd64

  • SHA512

    722ba39bbef0e1b2d6750f20820b91614cee94c73b6af958667cf708ecbcd486f76caf67c3e28dfc151abd43816ec28a864acde4604db1aac95b8ee4ffdd6930

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAD1ftxmbfYQJZKNvks:7I99DEWVtQADZmn0N

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2324-101-0x0000000003540000-0x0000000003671000-memory.dmp
    .dll windows x64


    Headers

    Sections