General

  • Target

    1980-462-0x0000000003760000-0x0000000003891000-memory.dmp

  • Size

    1.2MB

  • MD5

    85db95e844d49fcccc2fa9b2b8b24a74

  • SHA1

    4d3da2773c6ae6d2e4358d32dccdd89d287e45fd

  • SHA256

    4f03bdf1d2d06c271d3fef01b80b6bcaa3c1ef3d8f325931c997d32703c7b72e

  • SHA512

    ce1e84c44117edce9547b88de776bc3e6776ea1e4215aa8975dc266d6372683dc4ab1b85e939faa784fd4b071aaba0d4d0f768713f60e2bd5ff5d1433e7073d2

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAx1ftxmbfYQJZK2pTYQ:7I99DEWVtQAxZmn0e

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1980-462-0x0000000003760000-0x0000000003891000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections