Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.7
-
Size
43KB
-
MD5
c03b889f1df312375f3f68c3a79d026b
-
SHA1
d00cf4e9141a3f60eaaf240d11b339fcba6d1786
-
SHA256
15bdac0afd4382e373d26e66caf2acfefdd04abe6b8afc95d2f8f8f5fe63a731
-
SHA512
b3c41353ca24e45f823cdef4e141a16d3e52766458661800bb4b1120b9bf38a3f1e69d4ab1e8b15c49eede48357526f38bdbf2af3fd82e4ae0fa05aa7ef46dff
-
SSDEEP
768:JaiPsMn3hhaMs3Gl7torKHZOxC3EDqVkHObq2NwFOHLkL8TSHHKleB0ptGu14wNb:UiPsMn3k327+reZOxC3EDgku3NwFOHLR
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.7.html .js polyglot