Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_explorer_lolbin_execution%2.7
-
Size
43KB
-
MD5
ca5552d3fc3a44c84e0115dd45743f63
-
SHA1
f52f1b5dbcb9e4614db4de91cd7e4eb2a1537760
-
SHA256
2e786e28a704ebb3e5836d25019dcf887b94eed4d2a207c7ae784f081b133c80
-
SHA512
d3df528437295164967d07aa83a8bb5239bdf98ba89842c058fe17d23e1882e4f054f50e9e4a28b47b1c98ab9bf1d84fdec9bce2a42da0a99b4e8e915df852ad
-
SSDEEP
768:yFgq8ciPsMnspADQAUsVGl7tohe5SxC3EX3mkHCU9NwFOHgkg80AMAh/eA4leB0/:AiPsMnKYV27+h9xC3Enmki6NwFOHgkgL
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_explorer_lolbin_execution%2.7.html .js polyglot