Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_rundll32_setupapi_installhi.4
-
Size
44KB
-
MD5
4a39c7ef242b12468bec2dc806ed71da
-
SHA1
a15bfdc2b6b92c505ffa70f88f35907462d32ab5
-
SHA256
09303ec8102842ed99e59aee4eb726e257e23a23613a0d0e61d11c8333bda3bf
-
SHA512
601002952a6ee5a1f8ab84599c655f607b936c1da366aa05494e74d08267ddf0c4aafac5a7954240aa24a6a8a0c44ff25880376dae93bb8d5d6ece388fb9a752
-
SSDEEP
768:WNiPsMnx/isIfGl7tosLI2fIZNJU43m5HIbYvONwFOH999890hgbQcleB0ptGu13:iiPsMnxyf27+MfIVUYm5ob/NwFOH999W
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_rundll32_setupapi_installhi.4.html .js polyglot