General

  • Target

    1532-383-0x0000000003680000-0x00000000037B1000-memory.dmp

  • Size

    1.2MB

  • MD5

    4e073938ad31f1088d803d87a0839b78

  • SHA1

    f50b6e6d4713d4734bfcf9c9549ee34bef67df87

  • SHA256

    28ce3dbf6c401bd93c09030e48ba7bfa0c554651b8e1b2bf29c048d12334a27c

  • SHA512

    b4b1fd6cb190b9145ab77bb91b5d53ffa814b8c4df3990c904ceb7c22945de95a6da4c29318d563b7fd21b63a825fb5d5fb3367c0c8bcf50e54ded981aec687e

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAn1ftxmbfYQJZKvoja:7I99DEWVtQAnZmn02

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1532-383-0x0000000003680000-0x00000000037B1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections