Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_registry_cimprovider_dll_lo.3
-
Size
43KB
-
MD5
4e3a4593d3d68e9578a6f0632cf32e04
-
SHA1
5da1c4203e7a5aef577d56f365c1f0a8fb2f6887
-
SHA256
4caf8240583bc820c2baadca375d945e157f82c9905c18bf2063657d616544f2
-
SHA512
213631ac2b57298a114a57311bc4faa3ee602877649f28304407d8739827cf8ce9cd64c1ae23b0cbad8a1427806d2c71e323cb746b7c1764a876436142660627
-
SSDEEP
768:9diPsMnvJLN0WGl7toil9met9e3mkHOjgNwFOH3x38XqPrSleB0ptGu1qwNTeK:TiPsMnvgW27+ijmet9qmkxNwFOH3x38B
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_registry_cimprovider_dll_lo.3.html .js polyglot