General

  • Target

    2064-356-0x0000000003610000-0x0000000003741000-memory.dmp

  • Size

    1.2MB

  • MD5

    bb5552b419b446a039b2804a5c595703

  • SHA1

    08c736e8bb88ca864cfac18af92b9e42ed8444ea

  • SHA256

    037e67db368979b5e614512d193610aea48a91652d1bf1ab53b7829591900ac1

  • SHA512

    964fb491d7014bfc55a6efae6583201db5d445a4c3c0d53c089db87d86119abd919f62358183ce8bfefbe06aea513fb3fbe78acde0d0869dc25f61ce13b5e020

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA01ftxmbfYQJZK20Y:7I99DEWVtQA0Zmn0z

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2064-356-0x0000000003610000-0x0000000003741000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections