General

  • Target

    2152-1208-0x0000000003440000-0x0000000003571000-memory.dmp

  • Size

    1.2MB

  • MD5

    995aa7eb90526ed900d5b56b80c5499e

  • SHA1

    c9faa51b7be60b1b8c99d078cf682d052fd00de7

  • SHA256

    c4d7645bd3bdc764246a1760d46b2910665054dbd32cd9fcd3ba62bc45dfb3b1

  • SHA512

    2c68adebb96e226435e8ec9bb2fae4a691d112142eecff32abfb5a66c56d6bd2b6f7e2c8cef65e75be45afcc52a9f707f97873bf5b7c175767ee4069668daca6

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAz1ftxmbfYQJZKX/a:7I99DEWVtQAzZmn0v

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2152-1208-0x0000000003440000-0x0000000003571000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections