Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Ffile%2Ffile_event%2Ffile_event_win_werfault_dll_hijacking%2F&t=C.9
-
Size
43KB
-
MD5
06be1d5c2ae8936d7b58f510f6488c7d
-
SHA1
0df49c3b6337f2c2df79e3fc43d034c8de910ee8
-
SHA256
6022cc5605ce852183496e3f45b4b3b8ea0d2bcb7146abcb766fd8ffcc771600
-
SHA512
8f6bf6e11f4005ac3b2953328e629e3263ad984c6f11ad7b440e24ba30946a90f544aff63f1b3a7f93f2c598a219a142c5d663a6b942a26d8c22cb5c80f95dd5
-
SSDEEP
768:83iPsMnAwQcUfGl7togBdmu73mkHFnNwFOHW9W8mDQ0VglYB0ptGu1jwNTeK:QiPsMnAnf27+gXmujmkpNwFOHW9W8mDj
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Ffile%2Ffile_event%2Ffile_event_win_werfault_dll_hijacking%2F&t=C.9.html .js polyglot