General

  • Target

    5344-453-0x0000000003280000-0x00000000033B1000-memory.dmp

  • Size

    1.2MB

  • MD5

    59a810a9376d1b4c81b887cb9ee9c7e4

  • SHA1

    7085e0be3c975788e8f4402bfd8691ac53dfa197

  • SHA256

    4f0c9b82b9779a53645093c37b99962fcdee9363e6b1052eb4e6073c45f17796

  • SHA512

    14a3448b4d5cc3b9b468aa91bacd019e2f7c27552c46a7bce9be84c8a46ca9dfccb94e86685302662ac26bcf9e088b1edd958b1e8802a72cc1ca41ff3db9bea1

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAn1ftxmbfYQJZKfjs:7I99DEWVtQAnZmn07

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5344-453-0x0000000003280000-0x00000000033B1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections