General

  • Target

    2796-926-0x0000000003580000-0x00000000036B1000-memory.dmp

  • Size

    1.2MB

  • MD5

    750857559a4342abb15a6cd56d2820f3

  • SHA1

    a6dd039067726285b479246528291b4a97cdf644

  • SHA256

    f6855e449a69f4179be3db4e2a13fe0b5d37bab23730604e134c16d0b9920ca7

  • SHA512

    cd3c4b05a0a3d937500f493aed25b635e9a4c7b1b268068538a86c1b8be1a782887e85dd685a0b68d67bc8776f58ce02502207e03c25fe0e3827053b6ebfc71d

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAX1ftxmbfYQJZK9Tm:7I99DEWVtQAXZmn0J

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2796-926-0x0000000003580000-0x00000000036B1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections