Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_lolbin_vsiisexelauncher%2F&.8
-
Size
43KB
-
MD5
d6d2e34802c7078638cd9fa7d5443d1c
-
SHA1
36ab05c7b3b727a3ea551b0d3eb70eee9ea0073d
-
SHA256
7b0fdeeab7020d0860a80c0c71e7be593672965dcb0ab7e89faf3b669ac7c554
-
SHA512
071c966651a9c19da4faa6c75034d4b529335be78cef6cc025337f5da5708c7137dbba7b83993f78e0ddece347783bcbbd107151c82933f5ad36ac3056504aa1
-
SSDEEP
768:1MiPsMnbF7wWqGl7toMDSC9IoT3mlH3RNwFOHLML8LvT+ZQGleB0ptGu1swNTeK:SiPsMnbLq27+MDSgIoLmlhNwFOHLML86
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_lolbin_vsiisexelauncher%2F&.8.html .js polyglot