General

  • Target

    2812-311-0x0000000003230000-0x0000000003361000-memory.dmp

  • Size

    1.2MB

  • MD5

    71c84c0be302b1b0f5ed2061f49871fe

  • SHA1

    dc789933addd187124e3d6b7a4a92f1428e36be1

  • SHA256

    1b4b3c185d5967ffd4212f517b3ccd11f467d14d03840c56d6fa4ed35a94def6

  • SHA512

    26a8226dd1343f7c2830ed5b38d18a25927de1e502c87d8318f056b939de1e132ab51b9b80cf99321940538167d73b76acd7c3bb4e3ccb5bd36fcb07edcb8fcf

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAS1ftxmbfYQJZKnOZ:7I99DEWVtQASZmn0O

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2812-311-0x0000000003230000-0x0000000003361000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections