Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fthe-dfir-report%2Fsigma-rules%2Fwindows%2Fprocess_creation%2Fproc_creation_win_qbot_exec_via.1
-
Size
43KB
-
MD5
db2892a3d389123d16d4a6f9ebd62e7a
-
SHA1
182285ab59c4f188c5ac13d2b12c71b9854dd8e6
-
SHA256
70c9f057f65298a8b6726122d4cc86790b01b466f3dc82aa242a4feb9c3c9048
-
SHA512
74e6ca0f654d7237db1e7f76c440805a6112aa7bbe5f685f12e4b3a9b5418db0e235cd3a658fa74006d03993e8f248f503b94e6c4a3a7d711e10d19e7ca0c589
-
SSDEEP
768:I5iPsMnn5XL1WGl7toIK+S+xDqO3mkHTtxNwFOHbxb8jafkCleB0ptGu1NwNTeK:GiPsMnn/W27+IK+S+xDhmkzzNwFOHbxC
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fthe-dfir-report%2Fsigma-rules%2Fwindows%2Fprocess_creation%2Fproc_creation_win_qbot_exec_via.1.html .js polyglot