Static task
static1
Behavioral task
behavioral1
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2.html
Resource
win10v2004-20240226-en
General
-
Target
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.8
-
Size
43KB
-
MD5
c0fd458ba47bb803a895eb52a2d76236
-
SHA1
d6d6d66ba7f89c2bebe513df7c5eb82a4210c74a
-
SHA256
19b5ce1d38bd35f94e15f4f6410869d95fd4836cefe5eed24411c8907bad6450
-
SHA512
ddc4b0bb7987a017a84c6dc91c034f5e2c8888035168c2c69301d67befc9cdf235f334486b84567fb6490cad5a975180c7aaecf7fa90f5ef723c34e0a28a8dcc
-
SSDEEP
768:BmbiPsMnwqj3nWqGl7toPsC9IoT3mlHLRNwFOHpMp8pvFsvuYleB0ptGu1+wNTeK:miPsMn9Sq27+PsgIoLmldNwFOHpMp8pK
Malware Config
Signatures
Files
-
login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.8.html .js polyglot