Extracted

• • Target
    8b79bf9d1963d88c16b9dc7c23a8c4f01ee1da072cc3ad7e8a25f8bfd12faf50
  • Size 840KB
  • SHA256 8b79bf9d1963d88c16b9dc7c23a8c4f01ee1da072cc3ad7e8a25f8bfd12faf50
  • MD5 45f3d9a7252960cbfea3c4563474ec5d
  • SHA1 dda79a8dd50dae9452fd1d04d34db3ccc6106979
  • SHA512 a667d99e102727c89acdad396cf6189ac70e8ffe18bcdc97ccc5f579f346323bda52fae042bdb5347d1830fd950b0d330658c60b59ee9042a098e9ac401cde50
  • MD5 SHA1 SHA512

  Score

  10^/10

  hawkeyekeyloggerspywarestealertrojan

  • HawkEye

    HawkEye is a malware kit that has seen continuous development since at least 2013.

    keyloggertrojanstealerspywarehawkeye

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Uses the VBS compiler for execution

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2