General

  • Target

    3056-628-0x0000000003250000-0x0000000003381000-memory.dmp

  • Size

    1.2MB

  • MD5

    39591ede8b87b98b7511252d74187f7a

  • SHA1

    684594065a952d89d25f489b338ece70c9c7c4e9

  • SHA256

    366dafab0c7170f1ed8a7d22462643d5be7d077c86e2b98ba14f775b604aea7e

  • SHA512

    f1a13097778c4200557a07dfe8f96e09eb325815b47dd749fe2ff3109da5680f6dec850627d8bb2ed3d6c74fa7a86c4d010e3795f0203d0768ff2f4cc1fcb7e0

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA41ftxmbfYQJZKXw7:7I99DEWVtQA4Zmn0g

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3056-628-0x0000000003250000-0x0000000003381000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections