Overview

overview

1

Static

static

1

login.php?...2.html

windows7-x64

1

login.php?...2.html

windows10-2004-x64

1

User tags

Assigned on submission by the user, not by sandbox detections.

Threatview.io Proactive Hunter

Sharing

Copy URL Twitter E-mail

General

  • Target

    login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.7

  • Size

    43KB

  • Sample

    240406-fba6vsag5v

  • MD5

    c03b889f1df312375f3f68c3a79d026b

  • SHA1

    d00cf4e9141a3f60eaaf240d11b339fcba6d1786

  • SHA256

    15bdac0afd4382e373d26e66caf2acfefdd04abe6b8afc95d2f8f8f5fe63a731

  • SHA512

    b3c41353ca24e45f823cdef4e141a16d3e52766458661800bb4b1120b9bf38a3f1e69d4ab1e8b15c49eede48357526f38bdbf2af3fd82e4ae0fa05aa7ef46dff

  • SSDEEP

    768:JaiPsMn3hhaMs3Gl7torKHZOxC3EDqVkHObq2NwFOHLkL8TSHHKleB0ptGu14wNb:UiPsMn3k327+reZOxC3EDgku3NwFOHLR

Score
1/10

Malware Config

Targets

    • Target

      login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.7

    • Size

      43KB

    • MD5

      c03b889f1df312375f3f68c3a79d026b

    • SHA1

      d00cf4e9141a3f60eaaf240d11b339fcba6d1786

    • SHA256

      15bdac0afd4382e373d26e66caf2acfefdd04abe6b8afc95d2f8f8f5fe63a731

    • SHA512

      b3c41353ca24e45f823cdef4e141a16d3e52766458661800bb4b1120b9bf38a3f1e69d4ab1e8b15c49eede48357526f38bdbf2af3fd82e4ae0fa05aa7ef46dff

    • SSDEEP

      768:JaiPsMn3hhaMs3Gl7torKHZOxC3EDqVkHObq2NwFOHLkL8TSHHKleB0ptGu14wNb:UiPsMn3k327+reZOxC3EDgku3NwFOHLR

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks