Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_explorer_lolbin_execution%2.2
-
Size
43KB
-
MD5
11510291a066f67a9bdc7241b63c6bfc
-
SHA1
49ce5135fb22f05e07c79c557d5706365a7780db
-
SHA256
742b73d0a817487ea7df6b28f2de9b1df1975eb4635c2e936a22bb90cd6c7b77
-
SHA512
98a6ab5f0820edb4b8f7a502a34e2d40053c72f68058be687c2292245e1afbe69994537cbd1f8efd734f284679dc30840e617e7ad5e828da9459b5d48e6e55f3
-
SSDEEP
768:CFiPsMnkMNJsUGl7toA61dhjC3mDHw0NwFOHu3u8ul+HqF5leB0ptGu1ywNTeK:qiPsMnkVU27+A6/hSmDbNwFOHu3u8ul9
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_explorer_lolbin_execution%2.2.html .js polyglot