Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_renamesystemutilities%2Fproc_creation_non_exe_demo%2F&t=Proce.2
-
Size
43KB
-
MD5
3cf6f9ee5f3a57caf039fe28bf2f3d10
-
SHA1
e116cd93cf2960179614c84c1b3cefe45028e2fb
-
SHA256
247e896d2335dc0ac8910503c63ba9bcb88449261217db4be27cbed5dec2b303
-
SHA512
4c79774584fe9e7cc83db04573af877de60ad5d47a90e594677dc22c389b394b7de527dcece68754cd861a04a0636db73da93eef7b6330d7821ea59324c4522d
-
SSDEEP
768:gC5iPsMnc8BYEDGl7totr1dhjC3mDHSBNwFOHa3a8aly36opleB0ptGu11wNTeK:g6iPsMncyD27+tr/hSmDQNwFOHa3a8an
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_renamesystemutilities%2Fproc_creation_non_exe_demo%2F&t=Proce.2.html .js polyglot