General

  • Target

    1904-575-0x0000000002BA0000-0x0000000002CD1000-memory.dmp

  • Size

    1.2MB

  • MD5

    8f7b03a12d6078f584e606332aebe1d2

  • SHA1

    dc1794373c4b2efe1a5d99c3c03145ba8dbf192b

  • SHA256

    dc96654ca259bd45a3aa5dbb60202d584f9856edeb18a68b8f3b5a4a4b2b4398

  • SHA512

    cc64476a70ac06f89da62ce020b1e48f10a4f95d3c47d70bd2f162c271a9138f067ea9d691e6107db42f81626c55f7f6710cd2a99eea9b58e0f7c8d853efc984

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAo1ftxmbfYQJZKsOAL:7I99DEWVtQAoZmn0z

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1904-575-0x0000000002BA0000-0x0000000002CD1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections