General

  • Target

    2720-540-0x0000000003480000-0x00000000035B1000-memory.dmp

  • Size

    1.2MB

  • MD5

    ee3789c5f88b27068f23d13a41516af0

  • SHA1

    f1a84e11775c590ee6215664c4b229ddc8217e91

  • SHA256

    2ebfb25dd6790457191c6d541e92b02c3463f04f993966881ac9a95f7b830e05

  • SHA512

    0339fb1d1cdaa93df7a252aa534e637716e8d510aa3b0155772835ab067501aab47f24d55d222a92493452a31a9326bd5c7ad5ad99eb604b89986528b57bf02c

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAH1ftxmbfYQJZKKDW:7I99DEWVtQAHZmn0I

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2720-540-0x0000000003480000-0x00000000035B1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections