General

  • Target

    112-555-0x00000000034E0000-0x0000000003611000-memory.dmp

  • Size

    1.2MB

  • MD5

    758d1fc6e84f506c096883e3d8e4aeae

  • SHA1

    cad9d9e904db3c7c9bc2c15bcde951fc8bcb571f

  • SHA256

    73e7065de5b57a8366ca37df459b82c391989cf27f083f2e6d41425c4c66d8c3

  • SHA512

    c3c137aa8f49d668a2732f878e283189d490fbb9283b5b3a691bc750a939110b24ad50a49a3c964a303daa0292c6dfb8e12e6fa45193ffdbe80d4ae41fda8c0f

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAJ1ftxmbfYQJZKnRe:7I99DEWVtQAJZmn0R

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 112-555-0x00000000034E0000-0x0000000003611000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections