Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_registry_cimprovider_dll_lo.8
-
Size
43KB
-
MD5
b79ee7131a36fba82c6591cb7c0a3e97
-
SHA1
d2fdfcca160c9fdbb933d688058caeab99876dd7
-
SHA256
2b35063972051a463a749c831e2520273cdd6950f6ea3632f6ff5b9411dc0002
-
SHA512
de98b958f3b3c9bf381e19a687f8ae0fc599d8daedb80361a799136c4222ed0c76af1b82e50d123d807ae9a30a7038eb93abfb875c107cecfffb1d6d103d90e6
-
SSDEEP
768:FkiPsMnB/uzWvGl7tosGjC9IoT3mlHsilNwFOHlMl8lvpgbicleB0ptGu1zwNTei:KiPsMnBbv27+sMgIoLmlMENwFOHlMl8z
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_registry_cimprovider_dll_lo.8.html .js polyglot