Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2023_redcanary_threatdetectionreport%2Fthreat_qbot_rundll32_non_st.7
-
Size
43KB
-
MD5
b0e467e3c96e934cf0f9ddfcb3a30490
-
SHA1
3fbffa74ca0e8d473611395bb91c2ecf5cad1243
-
SHA256
6cfd1cd65bae179ab19510eac0ccbf700c5f0f3d1eb0a6127e72d2bf56f3cdd6
-
SHA512
17aaf4d24be6a7b1aa00a0e51eeaa66b6e6ec7784a034cedad1694d14967fbc02acf981fde20a48e9ae1231e6d6ec8cecce1e83468e59a04a8ca9898916a2e21
-
SSDEEP
768:NUiPsMns0YlAsGGl7toqcaxC3EX3mkHkyNwFOHuku8+/kehleB0ptGu1GwNTeK:aiPsMnsjG27+qtxC3EnmkVNwFOHuku8s
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2023_redcanary_threatdetectionreport%2Fthreat_qbot_rundll32_non_st.7.html .js polyglot