General

  • Target

    2164-693-0x00000000031D0000-0x0000000003301000-memory.dmp

  • Size

    1.2MB

  • MD5

    be9822f89749c24092a910f1b0f993f8

  • SHA1

    555bd7af0eb33de82a7ce51cbade3203ec345977

  • SHA256

    fe3b8fe3ad138d5b892ce2729e2884d8b17b4c28f9fc9b2255295e21b9015eb0

  • SHA512

    a0425d1153f57182ae9d876e7cba93356baae61c8183e60aba081b5a4e407574a8cfd840d1b4e22fed25ded87363199c4b32eeb89a629ad936bc612929c8d8b4

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAw1ftxmbfYQJZKlIz:7I99DEWVtQAwZmn0i

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2164-693-0x00000000031D0000-0x0000000003301000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections