General

  • Target

    4296-356-0x0000000003600000-0x0000000003731000-memory.dmp

  • Size

    1.2MB

  • MD5

    e90e1e48c7dc029dc21e3c06e2fc4bd5

  • SHA1

    d7d5e5c6e92fd827cb5da597b2cc1324e186dba4

  • SHA256

    b470d21fac317319f79565fb3a2d02f3044e29b3bb4605adb3e6c52e2667e802

  • SHA512

    643b71d84f4a3de6bdb4257801151fe1c192f4b00f13907343b6a59a4281b9862d950eee52dde5c6ad7c190f43a343ccace6860e7198f9491ca13a7b2b0c1db4

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA/1ftxmbfYQJZKSrd:7I99DEWVtQA/Zmn0I

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4296-356-0x0000000003600000-0x0000000003731000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections