General

  • Target

    872-600-0x0000000003560000-0x0000000003691000-memory.dmp

  • Size

    1.2MB

  • MD5

    d77dc0e7b705e8b81e274eec3c08309e

  • SHA1

    95708993d2849042821ec41715910be39ef29492

  • SHA256

    77ee17b0acece460ba780d8e3f9e98a455551c92c0b818069fc49db6fccff390

  • SHA512

    bb650e9aa83e77f7b5cf5ededb7f9ad766e367e84f5f070ed0877ee1fd2c68c4df4fa7b839af8735ce8c538ac2ecfd45530a0064667bdadb8b77b9f7c462775d

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAR1ftxmbfYQJZKQJr:7I99DEWVtQARZmn0U

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 872-600-0x0000000003560000-0x0000000003691000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections