General

  • Target

    2072-987-0x0000000003750000-0x0000000003881000-memory.dmp

  • Size

    1.2MB

  • MD5

    4b1ef3f452264501fea37eafa292a12f

  • SHA1

    41a8f9e4a4d26872dc7f7e8cd241b809a2568494

  • SHA256

    f482d34190823b97eb97ca8718d62723de35d23cf40bdc9b0ca2472ad43cadca

  • SHA512

    8292196da5d34edf5ec49f7afc99e7e785f320282ff0c399e8f4f532743ddcce4702b12e9e694a6b8b2fd1f8eddd113793a56805da4b9c8edb304f4e0688b673

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAI1ftxmbfYQJZKTA8:7I99DEWVtQAIZmn0c

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2072-987-0x0000000003750000-0x0000000003881000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections