Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_explorer_lolbin_execution%2.9
-
Size
43KB
-
MD5
fcd6999d112d8afaa4c4f5ac684df8ea
-
SHA1
674cf47dbde797f50a65c45b661b985fd8ee50ab
-
SHA256
c23613dd2763cd71b2e1f440f28205b8f81dcc8a117c3d8215449c0fc6950886
-
SHA512
90c61af76bc07eadc3c4417b7f2c92ed9a3c35d4bc23c6a7e5168fa792044ed6d2e7c9017c91d51f891a0ffcb32adab9922c20ab14caeecc064d9b6e9d8d554a
-
SSDEEP
768:LPiPsMng4moIuGl7tovjmunqVkHtOXNwFOHu9u8+b4V9glYB0ptGu11IwNTeK:biPsMngtu27+vjmungk4XNwFOHu9u8+b
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_explorer_lolbin_execution%2.9.html .js polyglot