Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_gootloader%2Fwscript_execution_in_appdata_gootloader%2F&t=Wsc.3
-
Size
43KB
-
MD5
afb2bd4746933aba6b0cf0ec4d61752a
-
SHA1
de6c873d33ea7f6cb0a7e8ca5d71142ebd09995f
-
SHA256
956c849403caa85a234991c945278a33422559d0f355e0c6fef90c6f5cffbaac
-
SHA512
76f4ad04577ce8c9d5635847b5c749c2ab535d6cb2bedd1dbd467cfdc709d8e73647495eadb6f475c8a390b51b18055bc9e2db475a3f58e912083f7e8d7c2d98
-
SSDEEP
768:HviPsMnU8O60JGl7toib9cXt9e3mkHpGPNwFOHixi8a3sdpleB0ptGu1IwNTeK:PiPsMnUXJ27+iZcXt9qmkMNwFOHixi8N
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_gootloader%2Fwscript_execution_in_appdata_gootloader%2F&t=Wsc.3.html .js polyglot