General

  • Target

    login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.8

  • Size

    43KB

  • MD5

    c0fd458ba47bb803a895eb52a2d76236

  • SHA1

    d6d6d66ba7f89c2bebe513df7c5eb82a4210c74a

  • SHA256

    19b5ce1d38bd35f94e15f4f6410869d95fd4836cefe5eed24411c8907bad6450

  • SHA512

    ddc4b0bb7987a017a84c6dc91c034f5e2c8888035168c2c69301d67befc9cdf235f334486b84567fb6490cad5a975180c7aaecf7fa90f5ef723c34e0a28a8dcc

  • SSDEEP

    768:BmbiPsMnwqj3nWqGl7toPsC9IoT3mlHLRNwFOHpMp8pvFsvuYleB0ptGu1+wNTeK:miPsMn9Sq27+PsgIoLmldNwFOHpMp8pK

Score
1/10

Malware Config

Signatures

Files

  • login.php?skip_api_login=1&api_key=966242223397117&signed_next=1&next=https:%2F%2Fwww.facebook.com%2Fsharer.php?u=https%3A%2F%2Fdetection.fyi%2Ftsale%2Fsigma_rules%2Fmisc%2Fhh_lolba%2F&t=HH.exe+LOLBA+executing+.chm+files&cancel_url=http.8
    .html .js polyglot