Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240319-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vssapi_susp_load%2F&t=Suspicious+Vol.5
-
Size
43KB
-
MD5
961b1cdaa069a8255896074cd5945e1b
-
SHA1
8236923c4b1a1a5659e9761b1fe62d6b5e5f216a
-
SHA256
f66c4484ce39ddca131a45c6c583f3cfe63b8c2fd8cb51988d1f3860d3f42ff8
-
SHA512
b1eb16779a83bec2de3f67b6b14997bcc8f74c8c79c1bad66efc8b73dda70ede0ad35c156d35b1fc756a8b2039b5e2d41dc82efa50f3c5e55cf0db5ce21f0c78
-
SSDEEP
768:UOiPsMnZvtlaOGl7toKvw5dx3mkHgYoNwFOHdFd8BQdbMleB0ptGu1owNTeK:BiPsMnZWO27+KvAdFmkeNwFOHdFd8BQ2
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vssapi_susp_load%2F&t=Suspicious+Vol.5.html .js polyglot