Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.4
-
Size
44KB
-
MD5
af835c3accab114721ad11c2cb1414f4
-
SHA1
b818e0a131481aaf8b06aa8fae56d0eb397ca266
-
SHA256
271ecee736434e493533d7ae5fcbafad924aaec746b3a98df1b2d1f4bb729b71
-
SHA512
fc2938feedc811d1d076b034969025e5b45d185320db7afd57ce7f9e19f4daaf7a891052398d6de60d830f7001f211597967b345041e2b23533ce0dbbd429bda
-
SSDEEP
768:kBiPsMnbNLKIdGl7tosLYEdZNJU43m5HrzNwFOHP9P8P0vW5TuleB0ptGu1TwNT3:0iPsMnbrd27+bEdVUYm5/NwFOHP9P8PJ
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.4.html .js polyglot