Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.1
-
Size
43KB
-
MD5
0560b9d6873a58331206486494719569
-
SHA1
7f71d56823cc4714bbb911dad0e35f93ac60c762
-
SHA256
c3414c06eb6ea31f8fd4f4912d0f8fa1f98995c3e0ee59e2fb3e2863a64b2e22
-
SHA512
b35619ff8436eb65d86cbe7e8e2617ea1dd5edf83d4d105a76d5f9c6b43705929153513d3780a6aaac0e6a4f822d56d6fe76528e972bdf0f8670dca336508e3b
-
SSDEEP
768:h5iPsMnPBXG1xGl7toI0C+xDqO3mkHjSdNwFOHjxj8rynJqleB0ptGu1WwNTeK:fiPsMnPSx27+I0C+xDhmkD8NwFOHjxj+
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.1.html .js polyglot