Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_lolbin_rasautou_dll_executi.5
-
Size
43KB
-
MD5
99aece1972266d3369107c5825982e20
-
SHA1
addce9dab2fc7842c62ea14b93dacb4526fa8239
-
SHA256
638cb3702c9fd5a3c8587bf46d2fbd1c31d1276184d6cbbb08c489c3920757db
-
SHA512
942d20471604a3f0d97cddee535df35db51977f46d365b6b6f7527d4d66ae10b526abb9cb1a94d797bfceeefa4be9da6cacbe3cf11047b116cdce8f9a3162507
-
SSDEEP
768:hQiPsMnG6wlirGl7tofQw5dx3mkHCwNwFOHkFk8AVyTDleB0ptGu1swNTeK:qiPsMnG2r27+fQAdFmkRNwFOHkFk8AVu
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_lolbin_rasautou_dll_executi.5.html .js polyglot