General

  • Target

    login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.3

  • Size

    43KB

  • MD5

    07931258d369c7ac3418d7307827c848

  • SHA1

    121d7ff5c3fc37f21a862f13c68d277558f07a3c

  • SHA256

    c8360913614737b74484419a94099f9ae5ab3e39d44df99f2969b47f54cf0c1d

  • SHA512

    04eb36ae065d2258fc9bedf62a3ea9147e25259fecc7b846f6e76fdec68334dabcccbd67ec80931a3a19ef8b602b94f7534f3f02ae9ec7a8f2a2d05a72677aa2

  • SSDEEP

    768:KtiPsMnR/E2+MyGl7toir9uWt9e3mkHbTxNwFOHVxV8ZgNscleB0ptGu18wNTeK:4iPsMnRcMy27+ipuWt9qmk5NwFOHVxVF

Score
1/10

Malware Config

Signatures

Files

  • login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.3
    .html .js polyglot