General

  • Target

    login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_gootloader%2Fwscript_execution_in_appdata_gootloader%2F&t=Wsc

  • Size

    43KB

  • MD5

    ac609f64581d55807277b9a6015c722f

  • SHA1

    1258817eaa7be666360f3051d7704b7a1b84f883

  • SHA256

    495cea1838f2d626e2d1e2501db7da91445593978ba8f74c391cce01f3a99df6

  • SHA512

    1ad0ac6bbb40175d4dbf18013a6e8ccc2fa96114cfd4f666a80b1978a4986379e8a93b3cae3ce1cf96ad3885f13c7255324464a2047f3383d7701756c808ec31

  • SSDEEP

    768:msiWJSnDdDZBuyGl7toQZBieB8j3mdHJNNjmQH/q/8/KfmRC+leB0ptGu10wNTeK:xiWJSnDoy27+QZBieB8bmdPNjmQH/q/0

Score
1/10

Malware Config

Signatures

Files

  • login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_gootloader%2Fwscript_execution_in_appdata_gootloader%2F&t=Wsc
    .html .js polyglot