General

  • Target

    login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.8

  • Size

    43KB

  • MD5

    1ee2f6cbed8f91edab9e1c5791873c62

  • SHA1

    441bde21b5188c35cf43d344287857a7afec8338

  • SHA256

    fb3ef9fb6f315671455ef897ff6f36f14346c3ae5ed7537272ba4ee92c965d2d

  • SHA512

    ec2fe2dfbd2b33ed98dd813775598d9d1e65801ee0cfa879e225812b6a8f2d02267186e8a267e293d3e57e01824b06898561dc33b5a61d66ed7d0dd3b5afb8d7

  • SSDEEP

    768:zUiPsMnxfu8WWGl7toJ2C9IoT3mlHdbNwFOHBMB8Bv9A7M8leB0ptGu1SwNTeK:YiPsMnxkW27+J2gIoLmlFNwFOHBMB8BA

Score
1/10

Malware Config

Signatures

Files

  • login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.8
    .html .js polyglot