Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.9
-
Size
43KB
-
MD5
83d08fa062b4a447900a3595d133814c
-
SHA1
aa59a08af167f6fadffcb38eac309979c35f92e6
-
SHA256
5d75221f055d3bb372ec6582f8f0f6e3015d060c37477f6a02bdcdffe818c0fc
-
SHA512
4fbd036e2be43dceaf72263c6739ee3d4899b50efc7213a06ce44e10c880891b90445b5cc76e466e8307b9c8443e7540e53b1dcbc9834ad682af252edd8ba558
-
SSDEEP
768:RliPsMnLNhTMuGl7toqeUmu73mkHnyNwFOHb9b8jWjMqglYB0ptGu1YwNTeK:niPsMnLku27+qeUmujmkSNwFOHb9b8jp
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_mssql_sqlps_susp_execution%.9.html .js polyglot