Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fthe-dfir-report%2Fsigma-rules%2Fwindows%2Fprocess_creation%2Fproc_creation_win_qbot_exec_via.9
-
Size
43KB
-
MD5
973b9e433cf8667295714327f8cb2ac2
-
SHA1
6ebf7f15f37895ffb3adf7b74397ee3a1634b21a
-
SHA256
586f0678418fdfe5d03e20417c20d8d2996a4abccb8eb68f20e808c49924e26a
-
SHA512
43d53d156c0a0d902c43d082a19b8df69f5a1f63e7c1a7f2c71773cd28914eb6a040ec22810f258bd75bf5be93d179b56315a979fc6ca201f9b62a5aeb77ab35
-
SSDEEP
768:WHiPsMnk0odMjGl7tojrmu73mkHrY0NwFOHq9q8C/kHZglYB0ptGu1IwNTeK:KiPsMnkOj27+jrmujmkLnNwFOHq9q8CX
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fthe-dfir-report%2Fsigma-rules%2Fwindows%2Fprocess_creation%2Fproc_creation_win_qbot_exec_via.9.html .js polyglot