General

  • Target

    2708-666-0x00000000030D0000-0x0000000003201000-memory.dmp

  • Size

    1.2MB

  • MD5

    da843040be54864cdf12fcda01903f92

  • SHA1

    781579114163be08c34e4a41bcca904238db6a21

  • SHA256

    2a542e2e07bf7c776d64e29f2b3b6c3908ce3daedb219a2edba1f3f47298c90b

  • SHA512

    32e22d29864adc039281d11fed62744eeeb3887690575f248d92d7bdf54bd1190496df10c2c5964bf92c9a53fb11670f38878d578a07278a3fb60e3c1be47f10

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAg1ftxmbfYQJZKAV4j:7I99DEWVtQAgZmn0Ai

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2708-666-0x00000000030D0000-0x0000000003201000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections