Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2023_redcanary_threatdetectionreport%2Fthreat_qbot_rundll32_non_st.2
-
Size
43KB
-
MD5
b3e8ceb00f24a798f421e809a4fd5eb7
-
SHA1
f30dbf45f83752529de1d1b6ecc0df48ff8441b7
-
SHA256
30bfd21fd5585d254abac4ea196ee3c72706f0d379ddbb6ec0072ea196bb454f
-
SHA512
a4f8b62ccf9411d7e8fc05d4fbbc46ed320f9aa7bc7cd38145f505a0c64bc7f8b5d760ccec430a1e93071be5ec634f188d512dd625696fe46e5e4dfbef472535
-
SSDEEP
768:xriPsMnDFw5o1Gl7tomP1O1dhjC3mDHOGNwFOHP3P8Plv+55GleB0ptGu1nwNTeK:FiPsMnDh127+mdO/hSmDTNwFOHP3P8PI
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2023_redcanary_threatdetectionreport%2Fthreat_qbot_rundll32_non_st.2.html .js polyglot