Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_gootloader%2Fwscript_execution_in_appdata_gootloader%2F&t=Wsc
-
Size
43KB
-
MD5
ac609f64581d55807277b9a6015c722f
-
SHA1
1258817eaa7be666360f3051d7704b7a1b84f883
-
SHA256
495cea1838f2d626e2d1e2501db7da91445593978ba8f74c391cce01f3a99df6
-
SHA512
1ad0ac6bbb40175d4dbf18013a6e8ccc2fa96114cfd4f666a80b1978a4986379e8a93b3cae3ce1cf96ad3885f13c7255324464a2047f3383d7701756c808ec31
-
SSDEEP
768:msiWJSnDdDZBuyGl7toQZBieB8j3mdHJNNjmQH/q/8/KfmRC+leB0ptGu10wNTeK:xiWJSnDoy27+QZBieB8bmdPNjmQH/q/0
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_gootloader%2Fwscript_execution_in_appdata_gootloader%2F&t=Wsc.html .js polyglot