General

  • Target

    2632-239-0x0000000003690000-0x00000000037C1000-memory.dmp

  • Size

    1.2MB

  • MD5

    16eb3e15a0a6eac6b95b3805e1f45d54

  • SHA1

    7287bbfc1078ed864fd84065694ee7ea8072917c

  • SHA256

    60e66bf15f6d919d34bd18bbf96006588594692b966e0d0af323854af2315643

  • SHA512

    e52578b25526bb3f58ebe907aa44267496f7ba3e84dca35bf1f837b83ad7297cd57bc6e9635abae8107bae2f7a9e34b9a222dade993cd99b0654bd4ecd8ae154

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA81ftxmbfYQJZKEcY:7I99DEWVtQA8Zmn09

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2632-239-0x0000000003690000-0x00000000037C1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections