Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2024_redcanary_threatdetectionreport%2Fthreat_gamarue_rundll32_cmd.9
-
Size
43KB
-
MD5
80838360994b245d22be335e98d93ead
-
SHA1
05b6f6c6b5e2d2964a5dcc1e52b93a9cbef2fa35
-
SHA256
cc254da20a582196492e743bb1a00b14486d1be2643038adcebc24f93a6acb72
-
SHA512
3d3d5dbb55188501c701a3a1bda4785b4a7b0fd1341385f4835ebd7545b7db6fcd8ed91eb8c43a60f044827128f45ffcbe2171b38a64dbc606ef51a0169f5116
-
SSDEEP
768:tniPsMnwAK8UhGl7toMFMfmu73mkHlMNwFOHO9O8eTAYlglYB0ptGu1ewNTeK:ViPsMnwJh27+WCmujmkuNwFOHO9O8eTQ
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fmbabinski%2Fsigma-rules%2F2024_redcanary_threatdetectionreport%2Fthreat_gamarue_rundll32_cmd.9.html .js polyglot