General

  • Target

    3068-365-0x0000000003630000-0x0000000003761000-memory.dmp

  • Size

    1.2MB

  • MD5

    b0274d2443e054808c798da8eccaf99f

  • SHA1

    1381a887213b72899396f5ea933ab35cd766dc32

  • SHA256

    1f31304bdbda273ede4d89b81fba7917aef9ec5ed5f5cd46c3d2bbbbaeac1bd5

  • SHA512

    8ff54361bb35f4be9e8523f6c762d1a5120a3d0dbc46550dd0a70e186a9b06561d9b106223345a282ee4e7bce15c052c68cc60daf17408e2a8416fee4751185f

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAS1ftxmbfYQJZKkOB:7I99DEWVtQASZmn0P

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3068-365-0x0000000003630000-0x0000000003761000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections