General

  • Target

    2428-81-0x0000000003360000-0x0000000003490000-memory.dmp

  • Size

    1.2MB

  • MD5

    a293020463ede2d780f0a3178fc52e17

  • SHA1

    7296d6106ae411b1f2123e75f0c13eb5ec828b50

  • SHA256

    4cfe8f39c579181533e1bceb32d536b134e660d96ad9967096d68aca31e4c071

  • SHA512

    4c523722f2fd6b9df0e5da865e7b7cb696c87fd712321acc0e085ca0b2d3379a8a58898e45050509498e4b5086feea5a76793f492614fe1fafe8fd9fe16338fb

  • SSDEEP

    24576:xWtwofqzi3XR6dF0TkgXZet4QRiI8pTAhspNd00Ggz:cXqzmXR6tYQRiTAGRb

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.alie3ksgaa.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2428-81-0x0000000003360000-0x0000000003490000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections