Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.10
-
Size
43KB
-
MD5
df83a00a97b833ce646860d3fbfb6be1
-
SHA1
fecb4f738217d89d04242e2615e3673c84576ba9
-
SHA256
38a6ac7b377eff6ae7fe949d36e18ed1367d00601ef0b70ae25fa69483f8c75e
-
SHA512
f61456834fa7a57431ae55f70d6d41deaf93cdeb06061486a8851617649947faaa712a9048c4f682172c7b6b3d38e825dafa33c63ce71433780b155a33a8713c
-
SSDEEP
768:CZiUNonDdLiQs/bGl7toNHPqzM3mkHyBNlyyHPyP8vmTY+leB0ptGu1GwNTeK:siUNonDG/b27+NHPqzEmkcNlyyHPyP8O
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.10.html .js polyglot