Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fthe-dfir-report%2Fsigma-rules%2Fwindows%2Fprocess_creation%2Fproc_creation_win_qbot_exec_via.5
-
Size
43KB
-
MD5
2f66589718c032bebf73e64dce21467c
-
SHA1
ae5256525ad461d1c0812f730c799952090c5aed
-
SHA256
d3d4cb0f5ffa794e98107f3d075f1a6a71acd679436de52b21c593b9850d43d3
-
SHA512
845e21bb56d162d7ab6064bd1968b2c436d24fa08d8972ecc7fecc9772952c67816d3af16ee9fe883f252ea6ac110ff0d1120425363c5a8d6ddf414c34c684e6
-
SSDEEP
768:hwiPsMnOqIdiVGl7to5bw5dx3mkHUYNwFOHgFg80FCkzleB0ptGu1+wNTeK:yiPsMnOmV27+5bAdFmkTNwFOHgFg80Fb
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fthe-dfir-report%2Fsigma-rules%2Fwindows%2Fprocess_creation%2Fproc_creation_win_qbot_exec_via.5.html .js polyglot