Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20231215-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.3
-
Size
43KB
-
MD5
07931258d369c7ac3418d7307827c848
-
SHA1
121d7ff5c3fc37f21a862f13c68d277558f07a3c
-
SHA256
c8360913614737b74484419a94099f9ae5ab3e39d44df99f2969b47f54cf0c1d
-
SHA512
04eb36ae065d2258fc9bedf62a3ea9147e25259fecc7b846f6e76fdec68334dabcccbd67ec80931a3a19ef8b602b94f7534f3f02ae9ec7a8f2a2d05a72677aa2
-
SSDEEP
768:KtiPsMnR/E2+MyGl7toir9uWt9e3mkHbTxNwFOHVxV8ZgNscleB0ptGu18wNTeK:4iPsMnRcMy27+ipuWt9qmk5NwFOHVxVF
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.3.html .js polyglot