General

  • Target

    3004-81-0x00000000030E0000-0x0000000003211000-memory.dmp

  • Size

    1.2MB

  • MD5

    b7111df58b5d7307b5fcd55c85bebf2b

  • SHA1

    ba07f15e14e52a4fab60d95390bd6c1c8ccab5ad

  • SHA256

    fcc746ee961c5a52c6d92525758dfac0ea07b81850999215b28b814fe8663a58

  • SHA512

    07989e2aa061925e77d7f112327fb325e3f0f38092b9ebfd8905a5e2dd3c836e83b30c395c5bdf3b4a792982bce939a1bc8b022a81318a63427bfd6a059e6b39

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAJ1ftxmbfYQJZKWRz+:7I99DEWVtQAJZmn02z

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3004-81-0x00000000030E0000-0x0000000003211000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections