General

  • Target

    1980-81-0x0000000002F70000-0x00000000030A1000-memory.dmp

  • Size

    1.2MB

  • MD5

    762bdc40da36fff7afe7a6cbbd8daea2

  • SHA1

    349dada7845cbca570643b8104e955c9683d759e

  • SHA256

    3536229f1e9e2e284fbbc6df086cb66cb91f72e399b0cabe9dcf5c0c9c3d2b69

  • SHA512

    ceddca5ae6b132b873e96b36f776812a81f423d5375c79c5f130dc421ede85e1ac124d2927ef92c27eb42ca93bcffd198310150da18b3db0a3cdf300e42e43dd

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAW1ftxmbfYQJZKfJRP:7I99DEWVtQAWZmn0b

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1980-81-0x0000000002F70000-0x00000000030A1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections