General

  • Target

    3564-344-0x0000000003560000-0x0000000003691000-memory.dmp

  • Size

    1.2MB

  • MD5

    fbe57fac34b298fae9ab393195d5c1fe

  • SHA1

    d28cfe28f1f467167d63ca00b7ed59279ae544be

  • SHA256

    ea41d431f575312a2b0629bea4027145e8ecc61a1727615e8a4b9756c73646ba

  • SHA512

    ebd1d093cdc9ceeee74342aa53bb0a12c82a5744d6dd0d50ff4e4817e4794200b800093a58aac2c2e580899e11617b93f3aa24a9eb06f5880525d282af45cdc2

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAR1ftxmbfYQJZKlJz:7I99DEWVtQARZmn07

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3564-344-0x0000000003560000-0x0000000003691000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections