Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fthe-dfir-report%2Fsigma-rules%2Fwindows%2Fprocess_creation%2Fproc_creation_win_qbot_exec_via.7
-
Size
43KB
-
MD5
966850d5c520b418dccfe904f1328416
-
SHA1
340e7d2769621e7c749a260644f13215064b9846
-
SHA256
22c9ba67685f2e1f1d23c49d1e96cb571fdeab07d32696ac4a7b3ffa0549c31a
-
SHA512
928a50ec01d77ad1a0e0e94c6f3fa9569a12b5a70f4cacd2463d5581d1f6f0e728390ffdb77913348954a0b3f9a5d5d0a963ebe04592cff74d24c1cdcaa5fabb
-
SSDEEP
768:BAiPsMno4DWFMswGl7toG7RxC3EX3mkHNDgNwFOHaka8yb4xjNleB0ptGu1fTwNb:CiPsMno/Dw27+G9xC3EnmktMNwFOHakK
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Fthe-dfir-report%2Fsigma-rules%2Fwindows%2Fprocess_creation%2Fproc_creation_win_qbot_exec_via.7.html .js polyglot