Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fthe-dfir-report%2Fsigma-rules%2Fwindows%2Fprocess_creation%2Fproc_creation_win_qbot_exec_via.6
-
Size
43KB
-
MD5
118b22b128d3d65b75068901f0acbb6b
-
SHA1
d06ace56ce1083392276a7ebc63ceb8f2a75efea
-
SHA256
5482ab7dfd951d6a6bcebaf77182f99de92b3b52073b3dc9b15be3f3eeee9e78
-
SHA512
3d9449019d921bfef9cfc52898dbb10877553cc4489823131b0ce68e90dbdbf403173906d6a4c8c5f991d71db898974cc9b23331c7ad6c8ddf279fda9f2b0088
-
SSDEEP
768:pKiaJan9zHAmshGl7to5JWIXh3mkHgjgNXmYHpSp8F8xIoleB0ptGu1QwNTeK:kiaJan94h27+5JhX1mktNXmYHpSp8F8t
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fthe-dfir-report%2Fsigma-rules%2Fwindows%2Fprocess_creation%2Fproc_creation_win_qbot_exec_via.6.html .js polyglot