Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_lolbin_vsiisexelauncher%2F&.4
-
Size
44KB
-
MD5
1f66133469569aacf4a50353c4c9cf2e
-
SHA1
d38b75e2b6fe088e8da17b7f97cc2ba0553cfb0d
-
SHA256
495f5dd8334a80c8decef586ff999780297901da8168555838f0c1eff7fa1199
-
SHA512
c0a0105676ca839050d0d560dc5cf9afd800d57abb6f0e5304745cf54f935a1560bcd165f3f09b079cd179503cc9d8f515ddaaf3632af282ccbfa2cd1d1965e4
-
SSDEEP
768:VHiPsMn0M9TIWGl7toVLIjn5ZNJU43m5HdYNwFOHq9q8q0CHWY5leB0ptGu1gwNb:piPsMn0RW27+Un5VUYm5CNwFOHq9q8q7
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_lolbin_vsiisexelauncher%2F&.4.html .js polyglot