General

  • Target

    1832-329-0x0000000003220000-0x0000000003351000-memory.dmp

  • Size

    1.2MB

  • MD5

    34dd5c8012ce4d0f0fa634e5d70f7bf2

  • SHA1

    7fbd88c860a644eee4a46ebf2c5fc141a1ffcdb4

  • SHA256

    731a09717f7a629a3bf681d4f0a344a3862c7789faac76f303f44b927c044b9f

  • SHA512

    38acb979f32b53d050002026acc1e7ca165ad1db430c10ff51457460d88ed2c67b1cf564d3ae237a1b4e5a4e52a79208c4d8e21a9cb050d809df931cb0cd52ce

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAt1ftxmbfYQJZKEFu:7I99DEWVtQAtZmn0s

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1832-329-0x0000000003220000-0x0000000003351000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections