Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Ffile%2Ffile_event%2Ffile_event_win_werfault_dll_hijacking%2F&t=C.10
-
Size
43KB
-
MD5
0b4b112f5fc557de0c9290bee5b3a8fe
-
SHA1
9a6e3bd30467f4e26f4001c8c67201773f1fd597
-
SHA256
d1f62700a2a68cb3b2b0e93ae407b3572bdf5af0539889fd0428224e7bb89e99
-
SHA512
5d4d8002e5bba83cf3176314c645f490acefbd45ca5e519a31478d1649268a4ba5ac89f94e98c2c005c099872088be9020d283d6eff087d1160cffaa530f1c87
-
SSDEEP
768:cViUNonJ3DV0stGl7ton5pVqzM3mkHLlNlyyH9y98hIll0leB0ptGu1ywNTeK:aiUNonJTt27+n/VqzEmk5NlyyH9y98hR
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Ffile%2Ffile_event%2Ffile_event_win_werfault_dll_hijacking%2F&t=C.10.html .js polyglot