General

  • Target

    2368-91-0x00000000030D0000-0x0000000003201000-memory.dmp

  • Size

    1.2MB

  • MD5

    245dc5316a8f03becf8b18027852c76b

  • SHA1

    59ff8c1a08742a8a7f38e7dbf271405721e19090

  • SHA256

    5694f234255f9884cdf218c7cc657a9d3cb49977964fb0361c65695a19244792

  • SHA512

    f8c09978667fd0039b00f95abc95cc7286b7b6878fdc0d7756979abbab376395cf79248e7b84a824795f938c62e7f8b2ba25f852f24721195ca6e333cf57be9a

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAg1ftxmbfYQJZKHV4o:7I99DEWVtQAgZmn0Hi

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2368-91-0x00000000030D0000-0x0000000003201000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections