Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_winrm_execution_via_scripti.1
-
Size
43KB
-
MD5
80fb50e7aaa541fb84886ce007af45eb
-
SHA1
c9047bea0ca9095ce532955c2c68b750bc444fe1
-
SHA256
38a3ff4f40e8b40ae2ceec3b87c81cb5b7735120512391604bcfa74e0e06a34b
-
SHA512
710b2f9bed70ab04b2e0fa9df9440aabf84737f79a8a5a2837075e3061250887891417d1f61c5bb167cf36582fa865b8955002c221fe7b4e16c5ceeb9f4939c2
-
SSDEEP
768:YPiPsMnK2Vl1YGl7toc8+xDqO3mkH9WNwFOHgxg80p+/XleB0ptGu14wNTeK:4iPsMnKoY27+c8+xDhmkYNwFOHgxg80s
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_winrm_execution_via_scripti.1.html .js polyglot