Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_lolbin_rasautou_dll_executi.4
-
Size
44KB
-
MD5
3719e473de96b1a176c3fd61a086e463
-
SHA1
2b924931a9c311b8f84865ce1505448f374256d7
-
SHA256
41122696cd2b7500aabd21e373e123d97f1f1f5bccfa2f4462600334e480f385
-
SHA512
bd51df9ed11983733e4913b864b31cf198a9c788715a22af3bf648ee69f609c49084f6de8209c57b5cc8b695c5d92c943538579cadbafd6a70d486ede6ef4e16
-
SSDEEP
768:QxiPsMnr15gSIFGl7tosLLMkqZNJU43m5H0KNwFOHP9P8P0vuhL2leB0ptGu1JwB:QiPsMnreF27+YMhVUYm55NwFOHP9P8P/
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_lolbin_rasautou_dll_executi.4.html .js polyglot