General

  • Target

    4512-337-0x0000000002FB0000-0x00000000030E1000-memory.dmp

  • Size

    1.2MB

  • MD5

    b7c8ac4eb13f4aaaf1b9541966702f06

  • SHA1

    39283da7066fdc222932d079edb6f1e087f7dfea

  • SHA256

    58eab1fcfbbcb818cdbb9c3a9ad535e6e72502e76d4156f9b58e4342ed263bdc

  • SHA512

    d390dd9713d91dab88aee82ff31b5170973fbf7f18cd482eaf2d76c20f10fbc4e7d9ba76f954e26daec03759ac66d10e2338157931e733293b0bba01ae3d48d4

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAK1ftxmbfYQJZKhQ1t2:7I99DEWVtQAKZmn0hkt

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4512-337-0x0000000002FB0000-0x00000000030E1000-memory.dmp
    .dll windows x64


    Headers

    Sections