General

  • Target

    5988-451-0x0000000003440000-0x0000000003571000-memory.dmp

  • Size

    1.2MB

  • MD5

    3011ebd0aaaec2bf526bad31f8acfab2

  • SHA1

    de0fca03093e09e5c0fb0db6854a0289a765836e

  • SHA256

    d66e973d2e08a5158ef6e9c792072cc745c12d6c1b8036f444a2c6645b76feea

  • SHA512

    06dc50f2cc62bc00bb959b2af82c0eafcb8d47dd7d17ca96913d93419408747b271105e79651aa381d1eaf3bdfb3bc97284c082e58d3e44791cf06c84f9e6d2d

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAz1ftxmbfYQJZKd/w:7I99DEWVtQAzZmn0N

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5988-451-0x0000000003440000-0x0000000003571000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections