Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2023_redcanary_threatdetectionreport%2Fthreat_qbot_rundll32_non_st.9
-
Size
43KB
-
MD5
32b45d301c8fe7ed61769bf1a08aff68
-
SHA1
781af17ec79697e726c937c19150ebee65728754
-
SHA256
c735d092d8826fa5ea251c6339f8f46026a6efeefa8080e9eb0f138bf9ac189a
-
SHA512
16755bf12eb395e02e2b0ef707f07c27eb2118a35b4d956fd18debae2d1b5a519aa04c76fbdb72bdbb5900d88203a8294cea1a35ca6f6939440f24a7ac714a81
-
SSDEEP
768:OjiPsMnqe+/ULGl7toagmu73mkHjeNwFOHA9A8UhmMrglYB0ptGu1EwNTeK:iiPsMnqAL27+agmujmkCNwFOHA9A8Uha
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2023_redcanary_threatdetectionreport%2Fthreat_qbot_rundll32_non_st.9.html .js polyglot