General

  • Target

    3028-91-0x0000000003280000-0x00000000033B1000-memory.dmp

  • Size

    1.2MB

  • MD5

    2b0f147bfa94a9e31a7ac143c0731498

  • SHA1

    2899a3affb82bdc83c58cbac7582089643115244

  • SHA256

    48e86cfb272c43883c540cead96eb0cb7f9ca4e8ed5ebaf2bfdc57e11d02a101

  • SHA512

    db6552a2a8ff89043f906f6b20b80ca6f6d2f82e4d9c6a0f0041789e47797e9a0fa758735f85e707ac8a3332d0f3301b5d79213e42f973e5ac3fb156346e9491

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAn1ftxmbfYQJZKlj4:7I99DEWVtQAnZmn0B

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3028-91-0x0000000003280000-0x00000000033B1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections