Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240319-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2023_redcanary_threatdetectionreport%2Fthreat_qbot_rundll32_non_st.6
-
Size
43KB
-
MD5
5b69652ba4e83d41a5c6cd2f533eab10
-
SHA1
945070f56e2f03d5869e740cfb0036a0cc881655
-
SHA256
349b6c3d835b5ec80b10bada880ce07764254ed9c63136d9cb48130ac538fc18
-
SHA512
4822856bdd31a36724e10d6b0a406ade30642e681d4007fef0a7eafb28f314d903d53f16def1c46d15a5e6b5736b2a87d3adb6762da9df65d116e6175c3311e5
-
SSDEEP
768:pMiaJan+6samsIGl7toQLWIXhqVkH4tJNXmYHwSw8EVyUDleB0ptGu1owNTeK:miaJan+gI27+QLhXhgkYnNXmYHwSw8EH
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2023_redcanary_threatdetectionreport%2Fthreat_qbot_rundll32_non_st.6.html .js polyglot