Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20231215-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fthe-dfir-report%2Fsigma-rules%2Fwindows%2Fprocess_creation%2Fproc_creation_win_qbot_exec_via.10
-
Size
43KB
-
MD5
b8a651b461bdf00b702d4fb3781c29a9
-
SHA1
a2c621bd445688fcda4ffd2546a10cb3505b44cb
-
SHA256
ed3f33cfc63f2a584099b72f4069e9dc58a03a84f943ffffe9836aaa1541c995
-
SHA512
a4483fa71d8f78d8f236828cea375d3058d2ffa122d48f7eb02bb26a0d49b489e6f1a47a7aabcf87c1cbae0254e4e3123502fb7cd36d199eb5b8e6a918c51664
-
SSDEEP
768:ZliUNonTdudQsFGl7toqr2qzM3mkH3rNlyyHLyL8TmTM+leB0ptGu1+wNTeK:ziUNonT8F27+qSqzEmk7NlyyHLyL8Tmz
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fthe-dfir-report%2Fsigma-rules%2Fwindows%2Fprocess_creation%2Fproc_creation_win_qbot_exec_via.10.html .js polyglot