General

  • Target

    2008-657-0x00000000036D0000-0x0000000003801000-memory.dmp

  • Size

    1.2MB

  • MD5

    f67ef6cd0bbf393def78d08dba59bc91

  • SHA1

    8d5c3d8f676df53ff4fed654268772bea260bd0d

  • SHA256

    9ffaabf5902cda650cf5b716c2f4379af99e466f1e45b454844f9c703f9f3d5c

  • SHA512

    951e5f276d4c2a5af1f1741251d5b5e5aae3c52d0f4939294414742477a8eecec4a410e4be31302f1ec417820c9c3b9639553c47f78f66dc63481e0dfbe30a50

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAA1ftxmbfYQJZKkLY9:7I99DEWVtQAAZmn0R

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2008-657-0x00000000036D0000-0x0000000003801000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections