General

  • Target

    login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Ffile%2Ffile_event%2Ffile_event_win_werfault_dll_hijacking%2F&t=C.6

  • Size

    43KB

  • MD5

    c2dcb5e6644fe4178d29744d762ad6fb

  • SHA1

    50ac68e8cba960b2a869124889115ce72a336ad0

  • SHA256

    3e0cbeb0daaec3e2a2cf8b75e2f8e7b136335e4060e38c4a5c7dc987d9047d55

  • SHA512

    fb4dab5563fd3f4946b9d30f11f165773ee07cc3075419d8703164da583eaf6832c0c5c9296f0b729d85f9cee743ade7f7ebc09274d4ed4a927904ec3f1e7622

  • SSDEEP

    768:0AiaJan+6MkmsfGl7toj+gWIXh3mkHzJNXmYHMSM8IVybDleB0ptGu1ewNTeK:xiaJan+Wf27+yghX1mkdNXmYHMSM8IVY

Score
1/10

Malware Config

Signatures

Files

  • login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Ffile%2Ffile_event%2Ffile_event_win_werfault_dll_hijacking%2F&t=C.6
    .html .js polyglot