Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_winrm_execution_via_scripti.2
-
Size
43KB
-
MD5
4de3738af8b2d3db9e3bf04a52da98dc
-
SHA1
175b53c6844479e20207ff0f80a5cc03b77995ae
-
SHA256
04106bfb0cb505bb8fe196c78f0c6ba44a673ac27ec872163b9eae31238ab778
-
SHA512
9c25ec45532258fa94f80a833fb6409444672ec131217cb217c2244318e58ca8f5b6e1bcf612effd9dda838a870353ec464b29a6607ba6feeb7896ef5fb281aa
-
SSDEEP
768:ItiPsMnkcqasPGl7toXj1dhjC3mDH9/NwFOHK3K8KliXaMJleB0ptGu10wNTeK:MiPsMnk5P27+Xj/hSmDtNwFOHK3K8Klq
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_winrm_execution_via_scripti.2.html .js polyglot