Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_gootloader%2Fwscript_execution_in_appdata_gootloader%2F&t=Wsc.10
-
Size
43KB
-
MD5
78d171b665ba3021f3e8202fdef4bf99
-
SHA1
bf5d6a162923c22fbd518be7c72352a0cd269052
-
SHA256
04c31314786b7cc170599a91596c556a91137595968b1bb4f3ef5c803054dd3f
-
SHA512
12805e76f77d25a906fe3e1947a0aa6f4dd0571112b40930008edbdf23ae086641d55587e76e5efade4f12720839052e08519f54a0f096c8cadbe314358f702a
-
SSDEEP
768:j3iUNonu6rxQsgGl7top8qzM3mkHeHNlyyHwyw8EVyxDleB0ptGu1VwNTeK:biUNonuqg27+p8qzEmkONlyyHwyw8EVD
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_gootloader%2Fwscript_execution_in_appdata_gootloader%2F&t=Wsc.10.html .js polyglot