General

  • Target

    988-914-0x00000000034E0000-0x0000000003611000-memory.dmp

  • Size

    1.2MB

  • MD5

    7be7d88136680daae167214a90487fb6

  • SHA1

    727886f50223f411de0d7548a94038cb2dbf2ed3

  • SHA256

    9ef1603e2302fcfad516a0c0f00a26a28ae0facf6e4b9af3061ff5e3c68c10e3

  • SHA512

    ffee261fc8debfc07d1ffdf203212ef33936664c21b99d026abfb5c19faa9e5807fddafd8ce6a56511cc64b322f6e7faf07ee274a0ece0ade20501279002076c

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAJ1ftxmbfYQJZKKRB:7I99DEWVtQAJZmn0K

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 988-914-0x00000000034E0000-0x0000000003611000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections