General

  • Target

    2700-663-0x0000000003680000-0x00000000037B1000-memory.dmp

  • Size

    1.2MB

  • MD5

    aed318efff5c0fc85579446fb9f34fd9

  • SHA1

    82f47b4dc5edda8776980fc0c9690c8262fcf1be

  • SHA256

    8b5644f7b2cbb724ee73abac5bf3ca3a17e03592291368d469abc0492efe1931

  • SHA512

    ad5f04e8e68e39382a39656fb8ad390af75dd93879aa8b3280dbfcfa7de24d42115072979069fa2eafb5dbf26077bcca4a9a53d399735a5e3ea4e2a28b0ee103

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAn1ftxmbfYQJZKJojm:7I99DEWVtQAnZmn0w

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2700-663-0x0000000003680000-0x00000000037B1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections