General

  • Target

    2156-525-0x0000000002D00000-0x0000000002E31000-memory.dmp

  • Size

    1.2MB

  • MD5

    90196b7549a0714a9fad7c9d021ef8ae

  • SHA1

    ad0e5e73b5ac8ee0b66d4211142b7636bc860df0

  • SHA256

    16487ba4a259d72e2dbbba93d7bc7c5b1fdaa6fda83ff590b84bfe277e5b4912

  • SHA512

    73e55685a7d34cff08980d70d8040899e6e2bc3e90db92c731844693fb5a2046480cf7acce7bc2ce82ae961e4385102efd54dbd1d5a393a88b7676b368de4d2e

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAi1ftxmbfYQJZKlEMi:7I99DEWVtQAiZmn0CM

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2156-525-0x0000000002D00000-0x0000000002E31000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections