Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20231215-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vsstrace_susp_load%2F&t=Suspicious+V.1
-
Size
43KB
-
MD5
b0913530d9c9e305d70b1f07883555d8
-
SHA1
924f20b1fa9ecf0144c8e0184c916c51ec879ec6
-
SHA256
94b82639729856f73435d472c80d173bb125cbcae1cc2942c47f2afeaa96d47e
-
SHA512
d9004969cecb0395d2443648344c5a08f09ae8f5ec24c4392dd76c94f010bb66cea903cfe02aa42db45bb82ca83341b7484bdedb84713ea08629c806879248b7
-
SSDEEP
768:QLiPsMnggZt15Gl7toIQC+xDqO3mkHchDfNwFOH+x+8OzgV1leB0ptGu18wNTeK:IiPsMngq527+IQC+xDhmkINwFOH+x+8p
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vsstrace_susp_load%2F&t=Suspicious+V.1.html .js polyglot