General

  • Target

    login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http

  • Size

    43KB

  • MD5

    7a0996f4c2ad36f2617c0b70b24d8151

  • SHA1

    6fca0b40bf173572bd51b785d0d0bf621287945a

  • SHA256

    eb22f592776673e8b26e8acdb901e56d9230aaa334c74b5c2ba9aa9d7c839117

  • SHA512

    471b1d0d39be09bdb8274017b91fa4490c09ac658756b9c895473a60f88c4582b8ac553004608ce6b7b4a3547b5269fe4712d084d25e9a58b91565c4cf7b6c61

  • SSDEEP

    768:oOiWJSneq1iBuEGl7to1gPieB8fqVdH8/NjmQH4q484KsF0YzleB0ptGu1WwNTei:RiWJSneuE27+1gPieB8fgdMNjmQH4q4Z

Score
1/10

Malware Config

Signatures

Files

  • login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http
    .html .js polyglot