General

  • Target

    3740-555-0x0000000003120000-0x0000000003251000-memory.dmp

  • Size

    1.2MB

  • MD5

    b70339345a61a78cad95c8a1679b44d5

  • SHA1

    32013c9ed4d2ac01fe39cd0f633e9f891e9196bb

  • SHA256

    24369216b77efb6030f6cf51583e6303926e2ce6d961753ea2f06fdcd4d3a871

  • SHA512

    b202f3060fa19b2c92220efcc06e2b98459e0eae5c61c0daa3cd03c4d0098a6dea74687d68802db76056de28f86c1379cf5584fab3fafeeb39ef90861cc6d579

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAd1ftxmbfYQJZKIedOxiDLoDr5dlzZokmFF117bfH:7I99DEWVtQAdZmn0IedOxiDLoDr5dlz8

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3740-555-0x0000000003120000-0x0000000003251000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections