Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_gootloader%2Fwscript_execution_in_appdata_gootloader%2F&t=Wsc.7
-
Size
43KB
-
MD5
35dc559f87a9774e601fe951b5e236b8
-
SHA1
68fb32dac198629ff9b59a22328e31fa34b9455e
-
SHA256
4bfcc9fae5c5a1ae186183f1ee59f17fd21087e0c43c5c7f736e85a5bc3aa73e
-
SHA512
9b6a54164d5d9f718bf6c50650ce4e14342e7d735bdd604b16da2a1b117c1d52f641909073809c905799604f8ad8984ca58ad9b8848789b5e146d920194abb40
-
SSDEEP
768:seiPsMnfRQtMsRGl7toMeXxC3EX3mkHdSCNwFOHHkH8nCXn6leB0ptGu1lwNTeK:FiPsMnfsR27+MqxC3Enmk9TNwFOHHkHh
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_gootloader%2Fwscript_execution_in_appdata_gootloader%2F&t=Wsc.7.html .js polyglot