Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vss_ps_susp_load%2F&t=Suspicious+Vol
-
Size
43KB
-
MD5
49d960e4beea9cd715cb3dbe43c8e8e5
-
SHA1
88e83f9f64e4fdb8dd7dae6c603ac64a92a738b6
-
SHA256
f3e974d36934f8fb018da3f97c7fd1bd338bd07b74144a86c2a7688540244670
-
SHA512
ca92e3dd41f0e08070b3429d2ce4b9fc7263d7ee111b84eb5c4778c90826be0437cbd8065e4628e655f4cd26807341ef34c0b8d16c067d88c1c00a61886cf937
-
SSDEEP
768:8TiPsMnoQvnU7Gl7to9nmu73mkHDiMNwFOHS9S8Kjwb1glYB0ptGu1zwNTeK:giPsMnoV727+9nmujmkjhNwFOHS9S8KK
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vss_ps_susp_load%2F&t=Suspicious+Vol.html .js polyglot