General

  • Target

    3036-740-0x00000000035F0000-0x0000000003721000-memory.dmp

  • Size

    1.2MB

  • MD5

    66785b45e537ec5bf05c25b97c6dbc0c

  • SHA1

    6a510e529e7eba9ab547d4d857f452800b0a9e10

  • SHA256

    a994c6062886edb832ea3a828bf431d6448631b200dcd642c60de70eb9a6e4af

  • SHA512

    c335921a01e3aa2edfa863189fd997935363d6bdeaf9124083eaa50a71943af18f41ba35c66ca78ac0fe8d2e03d0985ecfcfaaddd3a9b6fc08562956aa45e99c

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAe1ftxmbfYQJZKzISk:7I99DEWVtQAeZmn0z3

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3036-740-0x00000000035F0000-0x0000000003721000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections