General

  • Target

    2196-333-0x0000000002BE0000-0x0000000002D11000-memory.dmp

  • Size

    1.2MB

  • MD5

    d0ab2d62b850d9c16db0c5b1d67454e0

  • SHA1

    7a6f18b1b98c902a547b8274f4076a2c8749335a

  • SHA256

    a17750e7c5492be8375d4e894ce8f6a185776f0bec7d1726c9cda8fd52117ba3

  • SHA512

    667c333722d932c4534486110cef1b50cb25b63a035f78e6025a2370fd504d352657e120b2e83a6df7e1e0ffd413e232a9d14bf016d4206c92a630671a4a005f

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAM1ftxmbfYQJZK8Sj:7I99DEWVtQAMZmn0f

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2196-333-0x0000000002BE0000-0x0000000002D11000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections