Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Ffile%2Ffile_event%2Ffile_event_win_werfault_dll_hijacking%2F&t=C.1
-
Size
43KB
-
MD5
8d11e710a9332b0578aeac8b28ed94cd
-
SHA1
58adf66a04786304102e6f030bf359ea2f453be4
-
SHA256
a43501c10613755fb6c4035778f16314a2271eb1e10ebbd7e6ff3f9cdb76061f
-
SHA512
413f2ddfbab514d57b8dfc37c8085491b94f5ff1176fe894dcf0f6e81d1ca67b5a1e4518247c5c8b514995324b7ec6fe575df73a533d49ea99ca126956b31845
-
SSDEEP
768:ZziPsMngwDW19Gl7touA+xDqO3mkHoRKNwFOHGxG8WDQvFleB0ptGu1ewNTeK:RiPsMngV927+uA+xDhmkBNwFOHGxG8Ww
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Ffile%2Ffile_event%2Ffile_event_win_werfault_dll_hijacking%2F&t=C.1.html .js polyglot