Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vssapi_susp_load%2F&t=Suspicious+Vol.6
-
Size
43KB
-
MD5
dfb420cc9c0790baeb47407d5271a07c
-
SHA1
3052c69f58e5f5a8c840ff8ec9927a25998f680e
-
SHA256
64cbe347883859d44c2a85c1be4a08b19f856e0888e9968faf73f6c392153967
-
SHA512
80f9cfa3892f930e80c2593d460c02f28810c2807c28fe1f298570a4ca44bfde2879bef2a508074cc3827d10f471b082e0c3b5fbf5a0d71d78a9c803474b43a6
-
SSDEEP
768:fyiaJan/h6jesB7Gl7todRyioWIXh3mkHqfNXmYH/S/8fSHXKleB0ptGu1+IwNT3:KiaJan/AB727+d5ohX1mkONXmYH/S/8K
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vssapi_susp_load%2F&t=Suspicious+Vol.6.html .js polyglot