Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2023_redcanary_threatdetectionreport%2Fthreat_qbot_rundll32_non_st.5
-
Size
43KB
-
MD5
5cdd835cd390f9470348bc47447bce55
-
SHA1
b9fd5b750220492d0b3e13dabc4c8484d26e2b21
-
SHA256
3b36cb4643f37678b090f28289e2e612f10334ddbaecdca8598081dec5baa049
-
SHA512
c9c434825cc9dd2757de93ac4e2a9901a53874f314e563066708e88ba62f81e72567b5b3a75cf37d2400758ea2ed7f6c4d95a75812e978568bcc570138b741e6
-
SSDEEP
768:5IiPsMnw4fgiaGl7toZv+tw5dx3mkHdUNwFOHmFm82b4rNleB0ptGu1vwNTeK:CiPsMnwqa27+JsAdFmkiNwFOHmFm82br
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2023_redcanary_threatdetectionreport%2Fthreat_qbot_rundll32_non_st.5.html .js polyglot