General

  • Target
    Bank-Deposit-Slip.exe
  • Size 851KB
  • Sample201109-7x3twmay92
  • SHA256 17c7aa7df0ffa47ac142bcf82edb465eedabcc7a307e8726eb12c92698302e16
  • MD5 SHA1 SHA512

Malware Config

Extracted

Credentials
  • Protocol

    smtp

  • Host

    mail.professionals.biz.pk

  • Port

    587

  • Password

    5HP&k4*z8jpf

Targets

    • Target
      Bank-Deposit-Slip.exe
    • Size 851KB
    • SHA256 17c7aa7df0ffa47ac142bcf82edb465eedabcc7a307e8726eb12c92698302e16
    • MD5 SHA1 SHA512
    • HawkEye

      HawkEye is a malware kit that has seen continuous development since at least 2013.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Uses the VBS compiler for execution

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks