Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vssapi_susp_load%2F&t=Suspicious+Vol.10
-
Size
43KB
-
MD5
0d1edd2639b73d99c01fee1c5493f0e4
-
SHA1
d963d436a22ef8b8513ce0b9cb22a4ff38b2ef83
-
SHA256
59166067b3e3441468a62c224ead11715b91db17a62de230f976e023f0209875
-
SHA512
62bd7364726f30cbaee8ee05a69b8e2557355975d0a625dd483dbefe36d7085de27891af7f9f40f39b209f18a583c594ff434679e2b617654b2297ba2258ea19
-
SSDEEP
768:j/iUNonCm+DYsbGl7toOuqzM3mkHHtoNlyyH0y08QZOVHleB0ptGu1GwNTei:DiUNonCFb27+OuqzEmkn6NlyyH0y08QE
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vssapi_susp_load%2F&t=Suspicious+Vol.10.html .js polyglot