Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240319-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_lolbin_rasautou_dll_executi.1
-
Size
43KB
-
MD5
a291e8add9b4eec9ae3169e8e865ab27
-
SHA1
0d1201e5ff6ad75d76ae374ec2716b542f6af5b5
-
SHA256
6dcd5691b1960a36ecfcdea16b565aa858f905e4ee86cac801e7c6a58a752ff9
-
SHA512
8c630bb271e4daccc054408dbcede5e26e260b81ffd2b952f79e4bcb07c10a6710d246fcd0972b29bfd0815594c4d0f3abc7d238291743602117ea4107c32caa
-
SSDEEP
768:ptiPsMnhniu1zGl7tooV+xDqO3mkHNJlNwFOHtxt8R41hkleB0ptGu1GwNTeK:7iPsMnhlz27+oV+xDhmkZNwFOHtxt8Rd
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_lolbin_rasautou_dll_executi.1.html .js polyglot