General

  • Target

    2188-461-0x0000000003250000-0x0000000003381000-memory.dmp

  • Size

    1.2MB

  • MD5

    4b91c6873c68688f499d3aa25df8c389

  • SHA1

    1506df691854139354961d3e3b28dccf0d72143a

  • SHA256

    2e6497bcbe0c5997a70f1777c6695a612a4d1d2e7e4638c5ec4597a10116cfde

  • SHA512

    41b2802a5b6b3a5c3f7a6707bfb9f8e33101474643dab827b394cbc44b138e7231f350d9bb12b05234b0e939c416da650c437f1a9089bf94fe9631dc5f834ee9

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQA41ftxmbfYQJZKhw7:7I99DEWVtQA4Zmn0W

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2188-461-0x0000000003250000-0x0000000003381000-memory.dmp
    .dll windows x64


    Headers

    Sections