Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%
-
Size
43KB
-
MD5
1a855d720f2cca611cccbf188632f8ba
-
SHA1
07f2be02bbc17f69ab5ec2df7cf6b32fc7e6a9de
-
SHA256
09d6f08400d040b46597001279b955a44b24b01a72c364f64b5d22952ef68f28
-
SHA512
1822175e588c9ca17a988387ce1487f9ffd68b24a950cc0be465a101fa49198e60dc3569bd1fb6c85a802f0d451ff282456e3a9a0ab66f702ea01a33fd25d7ae
-
SSDEEP
768:OKiWJSnIgP6JutGl7tok5oieB8j3mdHghNjmQHaqa8aKyzGW1leB0ptGu1gwNTeK:7iWJSnIst27+k5oieB8bmdaNjmQHaqaj
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.html .js polyglot