Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20231215-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_explorer_lolbin_execution%2.10
-
Size
43KB
-
MD5
445534a618eaf00eaa6bffd4b665a151
-
SHA1
e0ff29b4c3a33e1508f037be546b5957b2be28d8
-
SHA256
8f7878bb583dd1bcb1451da208c702065b93adfd266256f1b3b0b99f44da4805
-
SHA512
006d006201cd7e16ac32accfb892e5b5484ea1c2466e83856ac6bf480e22960fff7baa3df9934ca23bd680cac7132f6a4563a72f40b510c7e4f9141389fc88d3
-
SSDEEP
768:WtiUNon9jiWQsvGl7to49CuqzM3mkHarNlyyHVyV8ZsBDYleB0ptGu1YwNTeK:kiUNon9hv27+49CuqzEmkmNlyyHVyV8r
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_explorer_lolbin_execution%2.10.html .js polyglot