General

  • Target

    2436-939-0x00000000033F0000-0x0000000003521000-memory.dmp

  • Size

    1.2MB

  • MD5

    0e2581e8420c41d2c5afa1161788cdbb

  • SHA1

    fbb3d791b4b9a52b8f37b7c8c59843df3f2681d5

  • SHA256

    8490f5fe55622d886d00f419938285457704859f971a487137548c2693e5c0c2

  • SHA512

    6b44d1ae306bd5b1c87c0ec4843eb345a26ddb18c70b2068593d8371dd0cc0d9addb5052fb5cc745f74316185090d6a959392c7758110044e84e28cf3e972f32

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA+1ftxmbfYQJZKFZRyE:7I99DEWVtQA+Zmn0FZ0

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2436-939-0x00000000033F0000-0x0000000003521000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections