General

  • Target

    3892-421-0x00000000036B0000-0x00000000037E1000-memory.dmp

  • Size

    1.2MB

  • MD5

    b0a7be4a54862e27f2e287ae12be98fd

  • SHA1

    efe2a1871b893e4cb4fda15adc8b76c255115600

  • SHA256

    0b8634c35359f94334243cae53fd57d6ce86b2b6eeaa4a472f48bb197c155f73

  • SHA512

    558869a1e014f6192939f711223d7b9b7f9bea0b887dfddd6a4836ec33ac3e9c1459e32f0b358fe3f45037cc29c29b6028742d5f79c9a502f6fa5b08c8bc71b3

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA61ftxmbfYQJZKu2S:7I99DEWVtQA6Zmn0Z

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3892-421-0x00000000036B0000-0x00000000037E1000-memory.dmp
    .dll windows x64


    Headers

    Sections