Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Ffile%2Ffile_event%2Ffile_event_win_werfault_dll_hijacking%2F&t=C.2
-
Size
43KB
-
MD5
754e804cfc5f6d2e99bf3c1dcb78801c
-
SHA1
65b01b9bf32c69e6fac86e19be8722bb0db245ca
-
SHA256
3da6e7d6cad5f549effb912a9937024946947631de703701be7b2e395809fd8b
-
SHA512
e137c7315819ad6d799ecd61a73fa968a7b0274f8046e1792806d8e738bb4db96f3c6596340823eb8542a98a6206f7017867a2f68463ca9f4a8a0ce435ff524e
-
SSDEEP
768:6viPsMnNr1psMGl7toZl1dhjC3mDHlQNwFOHx3x8xltkflAleB0ptGu1NwNTeK:EiPsMnNQM27+Zl/hSmDiNwFOHx3x8xls
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Ffile%2Ffile_event%2Ffile_event_win_werfault_dll_hijacking%2F&t=C.2.html .js polyglot