Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vssapi_susp_load%2F&t=Suspicious+Vol.2
-
Size
43KB
-
MD5
d208100812e02965bb8d9e8e7e679654
-
SHA1
fdb5e09e556684065a315867eec20eaafaeaaed6
-
SHA256
882520f8e0a0ce09928040410cd134c4e98d3f1c17807a753b77587ab3bea9ee
-
SHA512
200aa8c9855b8116e3470516a3e16834d3a2eee2dab32a9f63211bc8587a08f227f48ab1777091b4306c131f0ade12e5a888708035fc906916e8608070e75b63
-
SSDEEP
768:3DiPsMnPJ6tsRGl7toEya1dhj0qVDHMCNwFOHD3D8DlLqd0SleB0ptGu15wNTeK:TiPsMnPlR27+Ev/hYgDlNwFOHD3D8DlJ
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vssapi_susp_load%2F&t=Suspicious+Vol.2.html .js polyglot