General

  • Target

    login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_winrm_execution_via_scripti.8

  • Size

    43KB

  • MD5

    ce2528215c80a7f360784251bce86b78

  • SHA1

    99c4f6e8c386e7f5a4bc16673d46307bd9f1d721

  • SHA256

    c18e9080dd877574a3663db72d506b386f65a0d08e40bfb9eabe969aaf5e689c

  • SHA512

    52f5dcdeeb7504eca70f9f067f08094bd89e5f5f0d7522766de62c5e7816d012c28b316fae0113f38a06d7ab49b549937ef0769b86d37635660502d11fae6e06

  • SSDEEP

    768:5MiPsMnJfVFWXGl7to2NC9IoT3mlH9pENwFOHekMek8ekveAA7p8leB0ptGu1wwB:WiPsMnJSX27+2NgIoLmlcNwFOHekMeky

Score
1/10

Malware Config

Signatures

Files

  • login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_winrm_execution_via_scripti.8
    .html .js polyglot