General

  • Target

    2516-702-0x0000000002DC0000-0x0000000002EF1000-memory.dmp

  • Size

    1.2MB

  • MD5

    83590cb28d52ff7a73caa61447a69612

  • SHA1

    8750d886837f807378032c0614d5055edfc95d76

  • SHA256

    b076cb7ea8c7c38c5345022dd6cdf7bf35a505d9a8408226509a4bb71067e205

  • SHA512

    7b41b4aaf1f2002642c8bd649c358eb46de22f8714ebe9237cea887efe3e5415b445c5c287ce3ee072789f678c6cec57a07a254b6806be3f6275de1c67effe73

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAu1ftxmbfYQJZKQg+:7I99DEWVtQAuZmn0h

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2516-702-0x0000000002DC0000-0x0000000002EF1000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections