General

  • Target

    1332-368-0x0000000003750000-0x0000000003881000-memory.dmp

  • Size

    1.2MB

  • MD5

    2240b4038419b48c1d395926b3be07a2

  • SHA1

    a1012309382683534ab4b83e9266924901f85eb9

  • SHA256

    420797d20524a5d7aff31c64348570135f9ea0fd26ab67949a70d79f66542240

  • SHA512

    aeb6a16a6c0cec79a5f12aede97967e45810bcb7f04a90a16d6275b55c4766feccbb95b59e023331c76a017d2aa1effa47a47ea33924dfa74042cde4fda1995b

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAI1ftxmbfYQJZKsAc:7I99DEWVtQAIZmn0x

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1332-368-0x0000000003750000-0x0000000003881000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections