General

  • Target

    1756-384-0x00000000034C0000-0x00000000035F1000-memory.dmp

  • Size

    1.2MB

  • MD5

    5352036ca0b96dc19e7fc63508a1eb3c

  • SHA1

    dadcc0eb6f3e00444e67fdc11fb78c37ce4b3bfe

  • SHA256

    599f12497655c0fb9499f272a14add9ec0abc39e8c0098c36273798e522d9292

  • SHA512

    77d0a86b30f1ac4ca7d0996121f83a23862cfb06c18426c64712bd468f916c2079c1ac021ea1b58b901413a56de22018c48462c7f8a663f122bd36764033eb44

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAb1ftxmbfYQJZKh3D:7I99DEWVtQAbZmn05

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1756-384-0x00000000034C0000-0x00000000035F1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections