Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.8
-
Size
43KB
-
MD5
1ee2f6cbed8f91edab9e1c5791873c62
-
SHA1
441bde21b5188c35cf43d344287857a7afec8338
-
SHA256
fb3ef9fb6f315671455ef897ff6f36f14346c3ae5ed7537272ba4ee92c965d2d
-
SHA512
ec2fe2dfbd2b33ed98dd813775598d9d1e65801ee0cfa879e225812b6a8f2d02267186e8a267e293d3e57e01824b06898561dc33b5a61d66ed7d0dd3b5afb8d7
-
SSDEEP
768:zUiPsMnxfu8WWGl7toJ2C9IoT3mlHdbNwFOHBMB8Bv9A7M8leB0ptGu1SwNTeK:YiPsMnxkW27+J2gIoLmlFNwFOHBMB8BA
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.8.html .js polyglot