General

  • Target

    2200-404-0x00000000035E0000-0x0000000003711000-memory.dmp

  • Size

    1.2MB

  • MD5

    5ad732a8a25db7c6695ee63aad725695

  • SHA1

    4f46b43ad26b35f9170b59d856f070049471fa0b

  • SHA256

    eea94b4d86d25c2938ff9e52832d78fb29fcc823a5ce754ce42f483ac69ccb48

  • SHA512

    c0e49b311b14eee07c6f6b32829c7ceca4b1a578c704af0c8dd3e3c408c21bcfa4b55597b0bc80fd8c4c797b9fa90a1a44c1b649d692984776c740f3039f06b0

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAZ1ftxmbfYQJZKuBS:7I99DEWVtQAZZmn0u

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2200-404-0x00000000035E0000-0x0000000003711000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections