Overview

overview

10

Static

static

VGpf4astGj3sQeh.exe

windows7_x64

10

VGpf4astGj3sQeh.exe

windows10_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VGpf4astGj3sQeh.exe

  • Size

    392KB

  • Sample

    200608-9dbdt3fxw2

  • MD5

    3ad2b596868395999cf1b9fdff597c61

  • SHA1

    b79eca4f733c309d8683dbaee89d487de97d2873

  • SHA256

    3a2adcac20af82cdb882ab9bd9a1a78ca30f833a488cd13a55daf8ff743271a3

  • SHA512

    766ade300af51335fda0e37da034905c3699821cf2e33a462787288620d5062104fc9d6b791e873a893321dcc1ae450ce40403b6b997e46ec70c4a2a36b4c558

Score
10/10
hawkeye_rebornkeyloggerspywarestealertrojan

Malware Config

Targets

    • Target

      VGpf4astGj3sQeh.exe

    • Size

      392KB

    • MD5

      3ad2b596868395999cf1b9fdff597c61

    • SHA1

      b79eca4f733c309d8683dbaee89d487de97d2873

    • SHA256

      3a2adcac20af82cdb882ab9bd9a1a78ca30f833a488cd13a55daf8ff743271a3

    • SHA512

      766ade300af51335fda0e37da034905c3699821cf2e33a462787288620d5062104fc9d6b791e873a893321dcc1ae450ce40403b6b997e46ec70c4a2a36b4c558

    Score
    10/10
    keyloggertrojanstealerspywarehawkeye_reborn

    • HawkEye Reborn

      HawkEye Reborn is an enhanced version of the HawkEye malware kit.

      keyloggertrojanstealerspywarehawkeye_reborn

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks