Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240319-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.9
-
Size
43KB
-
MD5
f109e28be63b5b6f17e3f1473b8b7680
-
SHA1
9dea9ba03cbe2411d0654bbce2c692e4ba99f4d7
-
SHA256
3b5269cfcec1cb9e26cd015227f9d3e3169cf17fa16cbd65b7fe1427d54135a5
-
SHA512
153f713028c0193c078422ffdd9efff2d05bd5d287b05bd55f3034f7ecaa3c30195e416de483c1954734809fed2379cdb6c3f81c8074271811a86df383823418
-
SSDEEP
768:CpiPsMn7VilUSGl7to6Xmu73mkHtpNwFOHX9X83OLYyglYB0ptGu1EwNTeK:IiPsMn7nS27+6XmujmkLNwFOHX9X83OK
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.9.html .js polyglot