Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vssapi_susp_load%2F&t=Suspicious+Vol
-
Size
43KB
-
MD5
7f21ca2103ad11d52254381eccaf6519
-
SHA1
93a247d0ef632622885686fe4a742478c5d28e30
-
SHA256
0a1231e4c65aa3f5deeb6d0b872c23bfd9d7a89c7025c415527a17996af2ffbe
-
SHA512
2ab5fd6896beedddae5c40a2886677c413d1be2ad8246ff2f53802477fb1fbb8b96d5a6fb0c5156e2de5e58ac924977f1c34eba7acf0a98ca6842ca0798153de
-
SSDEEP
768:TKiWJSnC2UsBuFGl7to5e5FieB8j3mdHljNjmQHEqE8EKgpgrXleB0ptGu1iwNT3:uiWJSnCBF27+5e5FieB8bmd5NjmQHEql
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vssapi_susp_load%2F&t=Suspicious+Vol.html .js polyglot