General

  • Target

    2184-91-0x00000000034F0000-0x0000000003621000-memory.dmp

  • Size

    1.2MB

  • MD5

    5f8aaffa1bb90ba20e8928b4022a6cbc

  • SHA1

    63f14322bee6d0eee9b7d0b142fc56ddf88338c6

  • SHA256

    790008699428b0acc57e7920beee5e519f8daf6537ee4c3341de1e62be6ad28f

  • SHA512

    fe8cce0a28a287f24c40d089aa156cf5ae85c27abf8cf3c09d5cc9e01b8c283d9c92d2c390d9e1cef23c6af21c6c439b1246cbb7096e2f74a1ecce0c93567e4b

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAO1ftxmbfYQJZKIViL:7I99DEWVtQAOZmn0X

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2184-91-0x00000000034F0000-0x0000000003621000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections