Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_renamesystemutilities%2Fproc_creation_non_exe_demo%2F&t=Proce.6
-
Size
43KB
-
MD5
e83ff1b8086224abc9278b2e0678956b
-
SHA1
e44274c32d22639dd00ceb9747063cd3fa6f61bf
-
SHA256
8eb3f7a5009b3a7724b6ac1b469268433554cc57dc25c3fb6ec5a55c5b244b22
-
SHA512
17f22f4b8882dd79adec8a50709661aba548feb138afc71fb79340954b4620443c44f07c5c8a51788dc97b43f918c4e544c3f103fa4c21ba6561fb17dddf1c7e
-
SSDEEP
768:faiaJan5nmNmssGl7tobQWIXh3mkHe7cNXmYHJSJ8l41EkleB0ptGu1ywNTeK:yiaJan5Ms27+bQhX1mk+wNXmYHJSJ8lk
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2022_renamesystemutilities%2Fproc_creation_non_exe_demo%2F&t=Proce.6.html .js polyglot