General

  • Target

    1624-915-0x00000000035C0000-0x00000000036F1000-memory.dmp

  • Size

    1.2MB

  • MD5

    c27415ce32d13a222337033bb30eb8c6

  • SHA1

    818ad480092d650c72582cf77b640caec18aa692

  • SHA256

    d4912def6c2621af939303d7e9a696513b1b537012f0ac1885e35ccf270c2f73

  • SHA512

    502a46328c7b743d6bc4aa7bd022ddf0ce8b55cd1ef5e4fc40dcf4c60c6b624b80e1f4981cc81c6160ddf6be6ee8f68caf25ae79b9c054389455ac37bce7f780

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAr1ftxmbfYQJZK9nT:7I99DEWVtQArZmn01

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1624-915-0x00000000035C0000-0x00000000036F1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections