General

  • Target

    1376-341-0x0000000003170000-0x00000000032A1000-memory.dmp

  • Size

    1.2MB

  • MD5

    912515efbfb91460b3a03591d7ee1584

  • SHA1

    2512f1f0aa0f805466cca6c6ece00b673f574fd8

  • SHA256

    ec1853b4aecec6e2c7608615eda0947f39e3afc4388706f3c3950f79f8a13f04

  • SHA512

    05600b9ce583b9f078b6239ad3d1313f2b46603be39cc570772aea0260529a6dcdf3ed95acf3173476f695e97e00ec4c03054048ea01324be0f3dec9bcd01560

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA21ftxmbfYQJZKVqM:7I99DEWVtQA2Zmn0Y

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1376-341-0x0000000003170000-0x00000000032A1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections