General

  • Target

    1408-463-0x00000000030F0000-0x0000000003221000-memory.dmp

  • Size

    1.2MB

  • MD5

    d642e0c952f76ec34047210a9dcc7544

  • SHA1

    5679d6bc5ac1a557468a9aa9e991828d3f51ca56

  • SHA256

    862c8030d4f30ee13795db85407e2fd6b1a3a55726899a7ae726e2e2be28702f

  • SHA512

    06e9837eb13ac494059a6711240cad8c31e8df6ee701cc00baabb657305a42a17f77b5a90b0f4a10709730b8f6aea29d8d20cc66e105709029ae24e0404542f3

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAO1ftxmbfYQJZKdiM:7I99DEWVtQAOZmn04

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1408-463-0x00000000030F0000-0x0000000003221000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections