General

  • Target

    732-348-0x00000000036B0000-0x00000000037E1000-memory.dmp

  • Size

    1.2MB

  • MD5

    49082d8c9b4c784275572073f9daadcc

  • SHA1

    7fc268db187a45489dc7b5e65b8aaf12caf50bd3

  • SHA256

    885c232731d7f145c51f5ee1dce0ff159375bf06926a5e66aea1f6c1b755877a

  • SHA512

    e4932caa4eca6e0ecbdc8ab3b8246730b5c7f6a53e7b5fdfec4cd79953a4b3ad8d5963ff7ddffaa69650f3d0b82433fd0fd67ab0dc6936a134b2e763dbfb5fa3

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA61ftxmbfYQJZK22e:7I99DEWVtQA6Zmn0R

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 732-348-0x00000000036B0000-0x00000000037E1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections