General

  • Target

    1732-404-0x0000000003330000-0x0000000003461000-memory.dmp

  • Size

    1.2MB

  • MD5

    c37e7f8b6d8fa64a74ff08f3f1d3b7e2

  • SHA1

    34e532dfc5512975ba8869dbb58c6146b6a0b0d2

  • SHA256

    7704c2a0e4e9a85af5939f1c281675d9b8f416180bf17095ecb184bfa06e3120

  • SHA512

    9188b6a647e904a2c2bc85d6c5a10ac8a552f400a136fe97b191fe4c02ca2d03544633952b90ca847bfa233de58c723ddbf7ab4f1e6c2a1a6817cd1aa0a2dc96

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAi1ftxmbfYQJZKqef:7I99DEWVtQAiZmn0t

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1732-404-0x0000000003330000-0x0000000003461000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections