Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Ffile%2Ffile_delete%2Ffile_delete_win_unusual_deletion_by_dns_exe.10
-
Size
43KB
-
MD5
cc5def16f133d75341845aef79d80a47
-
SHA1
f281eb9a74d4e1d7eee09726192429a7b95784ff
-
SHA256
3dd7eefc0656ee52ebf2a7532490cf4f52ba02262981deaf7dd7830a68ce776b
-
SHA512
daacbf1e3ad608f12db0057b699285899e586afab1f002a446d1e056bb733f0a2db216c7dc3e389ce84a1be15d16dac8c377996afbfe59d8c9f01f0a23c5eb03
-
SSDEEP
768:XHiUNonIoQHYsIGl7to04qzM3mkH0fkNlyyHSyS8KLII9leB0ptGu1YwNTeK:3iUNonIFI27+04qzEmkUMNlyyHSyS8KN
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Ffile%2Ffile_delete%2Ffile_delete_win_unusual_deletion_by_dns_exe.10.html .js polyglot