Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.4
-
Size
44KB
-
MD5
ade31f9fd540acf1ddc2bf3afa7fe625
-
SHA1
bb1733adaa5dcab8594abf3ed4a1000e83a37586
-
SHA256
0843cabe8f8d1e8219778eccef3b018229478635af12faba7b6fea7311593997
-
SHA512
b37a25db770d1fa055eb43b4229aeb4e425900ad28cbd2acef8f6bd247aa6882f9f246933336a53bb22ee6944b0ceadbe3e3cfd6056d3c185efcc769feaa7b89
-
SSDEEP
768:idiPsMnJXcBIsGl7tosLI0URZNJU43m5HVCNwFOHd9d8d0BozCcUleB0ptGu1OwB:miPsMnJXs27+qURVUYm50NwFOHd9d8dQ
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.4.html .js polyglot