General

  • Target

    1720-1184-0x0000000003720000-0x0000000003851000-memory.dmp

  • Size

    1.2MB

  • MD5

    48250917c48a30e1f44f5d9eeba85a57

  • SHA1

    ed9eba2412ac851754643df4e973869473ea6b85

  • SHA256

    1cdaf83a5a0a73dce219de1295fb3d4f33e6fcaf63acd68a5ed3a594c9aa21c4

  • SHA512

    a921042bd0005c74bc01df756d1d22729d15097e95cb7dfb0356b43e78da00fab01838fa9fefec277db5fa23bbb805f7245c983a819e71295818b1935b17aa89

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA91ftxmbfYQJZKLV/:7I99DEWVtQA9Zmn0B

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1720-1184-0x0000000003720000-0x0000000003851000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections