General

  • Target

    288-1270-0x00000000031B0000-0x00000000032E1000-memory.dmp

  • Size

    1.2MB

  • MD5

    73f037b5c8257312403a6810fab47b46

  • SHA1

    3337875228910ee54ff636f1fdc876b3e469fd08

  • SHA256

    96d044b6ff2f378264a6fdbcb1d2109196f36fc6bb170f8f50ea480ef404757d

  • SHA512

    bb9f3396cd852fdf1c00abda6b250cd30011d122dab90e8f9b75530fbd5722e644baf96bb68b97a5de3372dc9eb8a665e9eb76cfe523184c144c9b2629c47ba6

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAq1ftxmbfYQJZKUmR:7I99DEWVtQAqZmn0H

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 288-1270-0x00000000031B0000-0x00000000032E1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections