General

  • Target

    5664-666-0x00000000035E0000-0x0000000003711000-memory.dmp

  • Size

    1.2MB

  • MD5

    5ed68564c47ca75dffa9ceb30aaab878

  • SHA1

    553ea65f3b3d912cbfac76807055700253b75881

  • SHA256

    78687a6c639a74315ab306bd59d04a935d8d4adc3befb0476a2b62f1607eec3a

  • SHA512

    fce7258b63a57794ec68bf56780bf93b45c2bd5e9c0db65fb5a7fa858d9ee0374558c90e0e5b66d00dd3cb02bf6a5b1141b3512d41ada3cbcc00d1e333ca0101

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAZ1ftxmbfYQJZK/BK:7I99DEWVtQAZZmn0J

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5664-666-0x00000000035E0000-0x0000000003711000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections