Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_lolbin_vsiisexelauncher%2F&.2
-
Size
43KB
-
MD5
0bcdb94d36be977134d50b85e8fe4905
-
SHA1
b5806370919d90ad2c70fe2c8df561125b18a14c
-
SHA256
3d19f84e531fc85f3f3b0a2aaab6d0702ff1ce2ec0e5be8a0d4a9b7ca1ce8330
-
SHA512
ad46a731ca244509dd03f5fc714666f44087e26478d09d96d73f5c6c5f42ef6783aed295eed1012a28f04bc94dfd1a5b8d3fc8c2e9f9320d63eb56cd4ae4a1ef
-
SSDEEP
768:vDiPsMnvBdns5Gl7toUX1dhjC3mDH9vNwFOH73787lDyVzqleB0ptGu1TwNTeK:LiPsMnvI527+UX/hSmDZNwFOH73787lk
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_lolbin_vsiisexelauncher%2F&.2.html .js polyglot