General

  • Target

    1364-723-0x00000000032B0000-0x00000000033E1000-memory.dmp

  • Size

    1.2MB

  • MD5

    fb35bd4b8b6d3451de6ada47988247ba

  • SHA1

    3e813aa64870040dc1d207579b3e260c2dad1efa

  • SHA256

    00d6b64972f028f30fb22d610b49fd42901a4808e03d4a133cf6ff8f37bd0d91

  • SHA512

    749d87b307b99250d094bc6da1fad9a5d60c3470ebb41b872329588b6bf3373f057900cf7500a83749fe3be42cc940fc7837fb4ae534c3c1635aa7eb58be24ef

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA61ftxmbfYQJZK02F:7I99DEWVtQA6Zmn03

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1364-723-0x00000000032B0000-0x00000000033E1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections