General

  • Target

    1064-1310-0x00000000036C0000-0x00000000037F1000-memory.dmp

  • Size

    1.2MB

  • MD5

    9324a81735f7936c18739b1f08ecd9bc

  • SHA1

    dfeffd0af116a6634a8f67d47c2a406c18c24b5f

  • SHA256

    f54f5a728666d97132f2a61672b13e21b65df2181ae6eae4468d78677ad8b01b

  • SHA512

    c12a0c622a09acc9446299e3893272a55de635dc63e9963dfe2079483b5699a6f29eb41939ee316ca903543d7f68432616f3d6d8db472e10d4d50752df4aec31

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA71ftxmbfYQJZKBXp:7I99DEWVtQA7Zmn05

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1064-1310-0x00000000036C0000-0x00000000037F1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections