hawkeye_reborn | hxxp://zahernabelsi[.]com/zahers/ | Triage

Submit
Reports

Overview

overview

Static

static

http://zahernabelsi....

windows10_x64

Sharing

General

Target

http://zahernabelsi.com/zahers/
Sample

200221-xk83gt9c5j

Score

10^/10

hawkeye_reborn discovery evasion keylogger persistence ransomware spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

http://zahernabelsi.com/zahers/

Resource

win10v200217

keylogger trojan stealer spyware hawkeye_reborn evasion ransomware persistence discovery

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  http://zahernabelsi.com/zahers/
Score

10^/10

keylogger trojan stealer spyware hawkeye_reborn evasion ransomware persistence discovery
- HawkEye Reborn
  HawkEye Reborn is an enchanced version of the HawkEye malware kit.
  keylogger trojan stealer spyware hawkeye_reborn
- Executes dropped EXE
- Checks for installed software on the system
  discovery
- Checks whether UAC is enabled
  evasion trojan
- Discovering connected drives
  ransomware
- Modifies service
  persistence
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Modify Existing Service

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

keyloggertrojanstealerspywarehawkeye_rebornevasionransomwarepersistencediscovery

© 2018-2024

Terms | Privacy