Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vsstrace_susp_load%2F&t=Suspicious+V.2
-
Size
43KB
-
MD5
18433ee835c10dbd315e01007aad662a
-
SHA1
c53b9051b1b1cd14c4ea37c8de213d61b2f90967
-
SHA256
ecc781f95c2da178f2042533c0d132ac091ecacebd79151738b634ad0b2d86bb
-
SHA512
99bf4e7f2600c5227c603b53768856954b3e00a67600678069061872294fe1e31eaeb72488427560114dee6a52212e7f2991d6cb276a65163d6ca520914a4ca4
-
SSDEEP
768:7tiPsMnm6VlsQGl7to9S1dhjC3mDHcANwFOH83888l4VwNDleB0ptGu1iwNTeK:hiPsMnmPQ27+9S/hSmDDNwFOH83888lx
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fimage_load%2Fimage_load_dll_vsstrace_susp_load%2F&t=Suspicious+V.2.html .js polyglot