General

  • Target

    login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.4

  • Size

    44KB

  • MD5

    af835c3accab114721ad11c2cb1414f4

  • SHA1

    b818e0a131481aaf8b06aa8fae56d0eb397ca266

  • SHA256

    271ecee736434e493533d7ae5fcbafad924aaec746b3a98df1b2d1f4bb729b71

  • SHA512

    fc2938feedc811d1d076b034969025e5b45d185320db7afd57ce7f9e19f4daaf7a891052398d6de60d830f7001f211597967b345041e2b23533ce0dbbd429bda

  • SSDEEP

    768:kBiPsMnbNLKIdGl7tosLYEdZNJU43m5HrzNwFOHP9P8P0vW5TuleB0ptGu1TwNT3:0iPsMnbrd27+bEdVUYm5/NwFOHP9P8PJ

Score
1/10

Malware Config

Signatures

Files

  • login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.4
    .html .js polyglot