General

  • Target

    816-355-0x00000000036A0000-0x00000000037D1000-memory.dmp

  • Size

    1.2MB

  • MD5

    bd9baead853ccea134224e6be8f06d9a

  • SHA1

    ea1471042ef6d06793816ae64e91a51c1b41197e

  • SHA256

    b5814b3cefebc90ca11d08e682a6def1973d785350bf3677d88b27fd8b4ad0d2

  • SHA512

    8d4d29dd5857e69792051ba04cb32b1ffd52292c8dd5d5340f4c6e9e436c2f467db7ada1017e02de256e204511e9bdb1905c2184723ce26317edc30d145687b0

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAV1ftxmbfYQJZK196:7I99DEWVtQAVZmn0X

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 816-355-0x00000000036A0000-0x00000000037D1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections