Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vssapi_susp_load%2F&t=Suspicious+Vol.9
-
Size
43KB
-
MD5
e3fa2d34d055fc869644f5be6a5a9b5c
-
SHA1
3372f7000dee512a80b7de7a80892956e9e6bcf0
-
SHA256
3a2aecaa3f93281749bd981542bc7ba086b6bbc897061afd1ce0243438050da6
-
SHA512
02f7635fd7d8df566a08530295d5bd604147858e9e4e3f6885b3cb715b28d01372d0b38d9fa4751990d70219d04bc462d035e7825c95cbe2b83335150c7b5d9c
-
SSDEEP
768:qdiPsMnxHanUBOGl7to/dsmu73mkHaBNwFOH9998hYVi8glYB0ptGu1QwNTeK:4iPsMnxPBO27+/dsmujmkoNwFOH9998b
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vssapi_susp_load%2F&t=Suspicious+Vol.9.html .js polyglot