Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_winrm_execution_via_scripti.5
-
Size
43KB
-
MD5
1e2aa15c0abc1ce8ab3cdae5ca5716f8
-
SHA1
9197a7c364b287c7a8a6c4d29b770c83296c4f8f
-
SHA256
3917ad7321ec1f94ff49b3b150bbb3ee21b067a26d9a56ddf453a03626aab73d
-
SHA512
44a98203c15bdf9cc15f21360752e5a57708f0c0152b8ef620e6ded1526c0de97203d3ec804c2b471416feb00d1ff0252224ffa237fbb8e629ef230cb7339783
-
SSDEEP
768:HoiPsMnCeH/MacGl7toDqw5dx3mkHXZNwFOH0F08QhmG/leB0ptGu1GwNTeK:IiPsMnC4c27+DqAdFmkpNwFOH0F08Qhl
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_winrm_execution_via_scripti.5.html .js polyglot