General

  • Target

    1536-365-0x00000000032B0000-0x00000000033E1000-memory.dmp

  • Size

    1.2MB

  • MD5

    43c69e0ff2e334d66f2c7fd7bd942c1b

  • SHA1

    562ba66ac05a922ea9da32458937275b7d355e9c

  • SHA256

    488063393cbdc46cad1dfe065f8c71cbc84b75e910673ee3d2cd6fc33e1a33a5

  • SHA512

    a5ef1ca8fd98480ea6ea62e67032f17a48864b627d3a9892bb3e5a6adf087a90d2135ec3ea39d1807e28a512dbeff02414b5853728ff423e915533183060c3aa

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA61ftxmbfYQJZKp2r:7I99DEWVtQA6Zmn0A

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1536-365-0x00000000032B0000-0x00000000033E1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections