General

  • Target

    5116-341-0x00000000038F0000-0x0000000003A21000-memory.dmp

  • Size

    1.2MB

  • MD5

    11299ca31e9d7335fa2e47cc2c8d73cd

  • SHA1

    75e5b577304dd6b8bd8ec86fb325d97376ba3b9e

  • SHA256

    58ee226ecce252c474dfb8ef5cac06201fccf8f91d4143d0ad4ea301742379da

  • SHA512

    ff769c34d9b1cb056a68d3b18cc045318c6b79c8a65708f1ade4dfee02a3c9a79508851f3ed163301e382f3d692e4e46aeae9966bab4e1ea9963143352afc094

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAO1ftxmbfYQJZKWi4:7I99DEWVtQAOZmn0F

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5116-341-0x00000000038F0000-0x0000000003A21000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections