General

  • Target

    952-359-0x0000000003410000-0x0000000003541000-memory.dmp

  • Size

    1.2MB

  • MD5

    5c7360be469e1f4a6cbd793672825e6f

  • SHA1

    62762714b771107b4cc6cac4d41e447b4e20c36c

  • SHA256

    fad77835219cd5a947d199f0bd4ce7e981122079f6bdb40d8d348e0c37631475

  • SHA512

    fa0d4f55bb86bc1aa67b0926114375cd83fb36bca204c91b7252655150d07d0fd9b36f085e2e9e1374c79bbf076340c85c6c8179799da9afada22979ea38fd86

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAU1ftxmbfYQJZK9U2:7I99DEWVtQAUZmn0u

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 952-359-0x0000000003410000-0x0000000003541000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections