Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_gootloader%2Fwscript_execution_in_appdata_gootloader%2F&t=Wsc.4
-
Size
44KB
-
MD5
5d65f09236e0a4d577bb00f52512c00e
-
SHA1
c4f53a50d4f076f77d5938dee48bf80f4f63ce06
-
SHA256
76490f3d7065f88e2c2378b001465de49fd4c7ae05ae2d2f9e1bf48bde7ee620
-
SHA512
6dfc1808d20a1effa8713d8886bba6473da93e821e5917904ce9ed9edbb0a19702b7cad5d5df70ae42d2d90df2aae0af147ab9ef5d3c8283f34962f9872cb96b
-
SSDEEP
768:BNiPsMnxnBrIUGl7tosLINzTZNJU43m5H0INwFOHR9R8R0N4jDkleB0ptGu1+wNb:biPsMnx2U27+/zTVUYm53NwFOHR9R8Ra
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_gootloader%2Fwscript_execution_in_appdata_gootloader%2F&t=Wsc.4.html .js polyglot