General

  • Target

    4376-212-0x0000000003750000-0x0000000003881000-memory.dmp

  • Size

    1.2MB

  • MD5

    0481aa989f8826449841a339602321f0

  • SHA1

    987e858ae51512aadca427466315fff3a062298c

  • SHA256

    db0705e3a6075bd687e60f75970e4f4fa37fe6070d2759a398e87d8c8391e5c7

  • SHA512

    0c9388856fa3aac6ab681f59871d83b0d250150868792e763aa1c41d0bb4b3d8b7cf3f39a5870dacff299161cf3a7c7dc08148a91b43ccf86f614c61014e242a

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAI1ftxmbfYQJZKhAv:7I99DEWVtQAIZmn0m

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4376-212-0x0000000003750000-0x0000000003881000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections