Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_lolbin_vsiisexelauncher%2F&.7
-
Size
43KB
-
MD5
5e2ce7ff235ea07a9046c90d416260d6
-
SHA1
db9ffb848df71a47ea8d9bc18d95858be353eeec
-
SHA256
b72032e3946f6618fdca17f7d0c57d0bad1722730f54707ab8680a29af0bf325
-
SHA512
b5d205bd19bad0fb9a33a20f93d2eb19bce408ae02c2630891ebb0e96475ef7bd7ee0a5c5dedef0e32a0dc1b83ddbb381f20bd5663c063381b224f3fcc58f6db
-
SSDEEP
768:DKiPsMn3Bw0MsUGl7toh6HxC3EX3mkHLpNwFOH7k78DynxqleB0ptGu1twNTeK:eiPsMn3PU27+haxC3EnmkdNwFOH7k78u
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_lolbin_vsiisexelauncher%2F&.7.html .js polyglot