General

  • Target

    1760-1133-0x0000000003600000-0x0000000003731000-memory.dmp

  • Size

    1.2MB

  • MD5

    eff7f4f6c2b4bbcb284d1e15f4c15718

  • SHA1

    e113381680f1f9e9082c64cdaab685a251940f26

  • SHA256

    6e613cedeedb9e7909c83a1ae90305a3a8bd838b3651903f614da4b762012872

  • SHA512

    7632aa6405a9f014c3ef33f3a959a351721fdecadb633a74e776f23c88136a71ed0d22e07b50daead8d17cdfc1621bba39242b59ae05a8ff0b5ff30b9e4ddab1

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA/1ftxmbfYQJZKBre:7I99DEWVtQA/Zmn0N

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1760-1133-0x0000000003600000-0x0000000003731000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections