General

  • Target

    2052-307-0x00000000036E0000-0x0000000003811000-memory.dmp

  • Size

    1.2MB

  • MD5

    ba575941b473fee397df48ceb208a901

  • SHA1

    85f10b711259a4f69ecf585d3c929607eadabfa7

  • SHA256

    e2d6dcc329f313012e0576f804347bc8d531684ea0937496c19295deda6a4f80

  • SHA512

    311fa08f854f04f10aa06f2836c8a0663170aa871d2b40bcdc4459efe01500b3560534194afa639e1e4fbc65253f53758ca550d87720b1288f17c1e6f37bd29c

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAp1ftxmbfYQJZKKxP:7I99DEWVtQApZmn0q

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2052-307-0x00000000036E0000-0x0000000003811000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections