Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20231215-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_winrm_execution_via_scripti.8
-
Size
43KB
-
MD5
ce2528215c80a7f360784251bce86b78
-
SHA1
99c4f6e8c386e7f5a4bc16673d46307bd9f1d721
-
SHA256
c18e9080dd877574a3663db72d506b386f65a0d08e40bfb9eabe969aaf5e689c
-
SHA512
52f5dcdeeb7504eca70f9f067f08094bd89e5f5f0d7522766de62c5e7816d012c28b316fae0113f38a06d7ab49b549937ef0769b86d37635660502d11fae6e06
-
SSDEEP
768:5MiPsMnJfVFWXGl7to2NC9IoT3mlH9pENwFOHekMek8ekveAA7p8leB0ptGu1wwB:WiPsMnJSX27+2NgIoLmlcNwFOHekMeky
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fsigmahq%2Fsigma%2Fwindows%2Fprocess_creation%2Fproc_creation_win_winrm_execution_via_scripti.8.html .js polyglot