General

  • Target

    696-601-0x00000000031F0000-0x0000000003321000-memory.dmp

  • Size

    1.2MB

  • MD5

    9aae9c0d385e7f3cd95b6bf48c5b4fe1

  • SHA1

    7d62659265b5eb50ba85da0837feb2b35aa3eb4d

  • SHA256

    bebd0a5f608b1da379f390aef19712a70d816a22b5684bba3e7ad19ccc5cb893

  • SHA512

    39ea114f4f365a7ddd8b22bfd266cdcde4f4d4cdcb8a5b0f4a27614fccc75f2a0f4d66f228a3ceed827a61572db1d5267630af4307b65c5c5b6009db34afc8ae

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAe1ftxmbfYQJZKeSP:7I99DEWVtQAeZmn0d

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 696-601-0x00000000031F0000-0x0000000003321000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections