Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vssapi_susp_load%2F&t=Suspicious+Vol.4
-
Size
44KB
-
MD5
6e7b292a6a57452fde5369bdba8ae581
-
SHA1
513494b90b5c90df66f30ef862f938bc81f2cdd4
-
SHA256
4e36d0ca4f6320fdfa9f19000df162ebdd5cd4ce95db29d9b0ecd42c8c532b59
-
SHA512
1861c6b2419e4dfc3c10d00db03a1e29ffdf6a03b174fbbc3807d5ce26fbd194cd543ffcf5c274cbf1f4f6449d36e4b7137b53f2da1cccb5c8173df6331deca3
-
SSDEEP
768:jhiPsMnDlEkIZGl7tosLIR1hZNJU43m5HiaNwFOHX9X8X03ex2mleB0ptGu1MwNb:9iPsMnDOZ27+vjVUYm5/NwFOHX9X8X0M
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vssapi_susp_load%2F&t=Suspicious+Vol.4.html .js polyglot