General

  • Target

    1064-266-0x0000000003000000-0x0000000003131000-memory.dmp

  • Size

    1.2MB

  • MD5

    ab5ff5800fcde8b5e37d506ec03ed558

  • SHA1

    0a4f810218ac548040eda5ed9f573700d8144625

  • SHA256

    294fb5f152b2cb01318dbd813db06ee13826d2ee5c291bc6c31262a28bae05b0

  • SHA512

    a381077117c5cd3a21aae9d15ea54ca6f2213c05ec6de8a7ed985b7f93c7fb297e2050c9f873d200283efec8672acf96cf4b64ad2214d680a8602f6b7fb23a4d

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAf1ftxmbfYQJZKcLR:7I99DEWVtQAfZmn0S

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1064-266-0x0000000003000000-0x0000000003131000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections