General

  • Target

    4776-332-0x0000000003670000-0x00000000037A1000-memory.dmp

  • Size

    1.2MB

  • MD5

    c174cd771cd9bf573cfacfb87009a9f7

  • SHA1

    24b4319dcc68d2566e78fc7fe95b6cc0a4b0ab72

  • SHA256

    0062085d8b1427a4312513f47ab50bcd453e1eac98279e0c765de27da76a0857

  • SHA512

    50654edaea58e9347d7d7d7fa69bd9e39694b117a7f1703d0fac04728ec6e4d64826e915f44bf96574241ec69f7aac44e4b41273049f9778fe20d7aa090bb9d1

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAG1ftxmbfYQJZKlBIn:7I99DEWVtQAGZmn04

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4776-332-0x0000000003670000-0x00000000037A1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections