General

  • Target

    1360-208-0x0000000002AB0000-0x0000000002BE1000-memory.dmp

  • Size

    1.2MB

  • MD5

    733e93257da7dbf1d797382cb52039e6

  • SHA1

    c27a0078b1d58522e57dfd2f9c9f45797c56f72d

  • SHA256

    ef78f61143277814502e39fdb0f3e3cbad0d9fc5858b2606bc8b814e24c68e43

  • SHA512

    65657e2ffd75dbf23d15ea2610fd077d53ce00f2b6a5e9b33f2b105879158efe82d0893d24a5a428c9862e716b12fded7d10501a2e670953339fb250611449b0

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAH1ftxmbfYQJZK/R8:7I99DEWVtQAHZmn05

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1360-208-0x0000000002AB0000-0x0000000002BE1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections