Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2023_redcanary_threatdetectionreport%2Fthreat_qbot_rundll32_non_st.10
-
Size
43KB
-
MD5
d1dd49de1fd98cd18669589af780141a
-
SHA1
1ea66d8de004eb3b0cd417abb9631f33729bc4ad
-
SHA256
4cec5b188afef7a0ec82b230f3a31e795aab9c93b125f58e306aa349a5ef0712
-
SHA512
13c9decded4246bdac5c3114df0c425bfbdd26291d14602af3be123768232082bd5e702ddef6690e89cab18a3e056cbb820da2ca42e7533ca17192208cb47834
-
SSDEEP
768:IZiUNonX5zxYsmGl7toHCqzM3mkHnv8NlyyHbyb8jaf8CleB0ptGu1HwNTeK:eiUNonX9m27+HCqzEmk0NlyyHbyb8jaA
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2023_redcanary_threatdetectionreport%2Fthreat_qbot_rundll32_non_st.10.html .js polyglot