General

  • Target

    2980-723-0x0000000003370000-0x00000000034A1000-memory.dmp

  • Size

    1.2MB

  • MD5

    c53c96c1b343a46235a402f9fcbff110

  • SHA1

    a0902c3c45a2b12b0e6744f0315dc9a8a299bf1d

  • SHA256

    1860d7321ec980fa4d7e4bc274e87eda127227c5420e0c8e2923ae627e339248

  • SHA512

    3b894c95608c2d3958ae014e343763c22c6f32d3258186deb973257fe94cbe74b41172fcf6019e4b0e5cb274a3a7bb70e56f5905e9e88aca46994a820671a6a1

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAW1ftxmbfYQJZKU8XN:7I99DEWVtQAWZmn0D

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2980-723-0x0000000003370000-0x00000000034A1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections