General

  • Target

    668-1134-0x0000000003730000-0x0000000003861000-memory.dmp

  • Size

    1.2MB

  • MD5

    dca74c551e078ca6f9a5fe1aa21abf48

  • SHA1

    cba5317ba892cd799fac071701261230fd7e589e

  • SHA256

    96e8e18165fbe4f40c5dfd81cfc0d90e623ceee8ccb9efcecef84d29ebb91d3d

  • SHA512

    27f02e3082c187b7a88198eafb728e4f9ba846059d9bab13dc42e02d82d83d603ee5eacc6dc934aa5878bb595851536f5cdecb3e9f52bdd4a466c809785b9171

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAi1ftxmbfYQJZKheC:7I99DEWVtQAiZmn0w

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 668-1134-0x0000000003730000-0x0000000003861000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections