Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vsstrace_susp_load%2F&t=Suspicious+V.7
-
Size
43KB
-
MD5
0acfc263ad73e9229ee8a6faba734fc2
-
SHA1
24f54c34f4dc9cfe75068c6f33d302119f8c44ae
-
SHA256
1df4769e93ed591644541c98c997abdc6fda3ecac58271a57d9fb274f523f2cf
-
SHA512
542953f7d47db561f8888b12fe1e3d7fe7338f4fbc5ad651c9dcc69aca483e54a87f9d0357acb35404554234ec478255659f9b91cd6f2def12c6ea9cd9c99801
-
SSDEEP
768:dYiPsMnCmoLMsTGl7toQEixC3EX3mkHrRNwFOHUkU8wZOvHleB0ptGu1hwNTeK:WiPsMnCjT27+Q1xC3EnmkVNwFOHUkU8Q
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vsstrace_susp_load%2F&t=Suspicious+V.7.html .js polyglot