Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fthe-dfir-report%2Fsigma-rules%2Fwindows%2Fprocess_creation%2Fproc_creation_win_qbot_exec_via.2
-
Size
43KB
-
MD5
81dd7175f73acd395a68a01713059b9b
-
SHA1
357f39171283387e7f78479f0bed56971679cdff
-
SHA256
3b3442428efa527e2057d042d0873fd8bdbeb93dd3eeb22a4cf28291b4554537
-
SHA512
41ea8e041b23b794ac1fb9930c64f2478335383b73c694eb326661b27a6d52248176140a139cff113cc7cec22f95f3028221c02e60977e7b5bb8e648fe767008
-
SSDEEP
768:ZNiPsMneCfXsqGl7toXa5l1dhjC3mDH/rNwFOHs3s8sloNYYrleB0ptGu1kwNTeK:niPsMne1q27+K5l/hSmDjNwFOHs3s8sc
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fthe-dfir-report%2Fsigma-rules%2Fwindows%2Fprocess_creation%2Fproc_creation_win_qbot_exec_via.2.html .js polyglot