General

  • Target

    1036-312-0x0000000002F60000-0x0000000003091000-memory.dmp

  • Size

    1.2MB

  • MD5

    179acedcf806232b70b116a214906493

  • SHA1

    9c1a3a6b3004a6d25c3f30e68663fca5c4178c36

  • SHA256

    b6f9877114d2b2e7dec559643f3b64543a2622c56da3b50049f5cf6bd7404ade

  • SHA512

    54cd73429dcd573f8fccc500acda8c75ce359e94b2a2636a6da5642a03a9558ae691e4e26da7c590dbfec840029cc7e7d3034d4ffae55a32eefbf913a79695f5

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAx1ftxmbfYQJZKv6q:7I99DEWVtQAxZmn0C

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1036-312-0x0000000002F60000-0x0000000003091000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections