Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Ffile%2Ffile_event%2Ffile_event_win_werfault_dll_hijacking%2F&t=C.6
-
Size
43KB
-
MD5
c2dcb5e6644fe4178d29744d762ad6fb
-
SHA1
50ac68e8cba960b2a869124889115ce72a336ad0
-
SHA256
3e0cbeb0daaec3e2a2cf8b75e2f8e7b136335e4060e38c4a5c7dc987d9047d55
-
SHA512
fb4dab5563fd3f4946b9d30f11f165773ee07cc3075419d8703164da583eaf6832c0c5c9296f0b729d85f9cee743ade7f7ebc09274d4ed4a927904ec3f1e7622
-
SSDEEP
768:0AiaJan+6MkmsfGl7toj+gWIXh3mkHzJNXmYHMSM8IVybDleB0ptGu1ewNTeK:xiaJan+Wf27+yghX1mkdNXmYHMSM8IVY
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Ffile%2Ffile_event%2Ffile_event_win_werfault_dll_hijacking%2F&t=C.6.html .js polyglot