Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_virtualbox_vboxdrvinst_exec.9
-
Size
43KB
-
MD5
99089d81657243959f5abfde88063aff
-
SHA1
63420dfaca27f84e6ad0a76617eb0db52a322534
-
SHA256
74240105969b911e8c5680e6ba93eeea3900c7304888bdfaf19a33d983606bc9
-
SHA512
c58be3cd6c74df2436081698b17a2920f226fe1a573d2d547412d819a31465b1339009b094735b1d3e0aa4e71287ca472e6d3bece893b1f3022588c9e10622e3
-
SSDEEP
768:2riPsMnOyntMfGl7toYFmu73mkHV+9NwFOHA9A8U9qOvglYB0ptGu1RwNTeK:+iPsMnOFf27+YFmujmk1ANwFOHA9A8UZ
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_virtualbox_vboxdrvinst_exec.9.html .js polyglot