General
-
Target
ac1ae936d93f1428f49c7dc7d49b1354520be52cd10d57563d139d0693490871
-
Size
1.9MB
-
Sample
220205-nksq9sbahr
-
MD5
048905d3c65f3d1da17e665efb775ed9
-
SHA1
71f7b2a4f91959909f1fcc73417933250bc5064d
-
SHA256
ac1ae936d93f1428f49c7dc7d49b1354520be52cd10d57563d139d0693490871
-
SHA512
d6545d1875909a5bde60568cb53c07e2b53ea6acd186914ffa4e7dd9970dc0f7c562dd30dd86bab7e270f5cc0f441ead0bc2baf731ffa801cc50a58db7967ff5
Static task
static1
Behavioral task
behavioral1
Sample
ac1ae936d93f1428f49c7dc7d49b1354520be52cd10d57563d139d0693490871.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
ac1ae936d93f1428f49c7dc7d49b1354520be52cd10d57563d139d0693490871.exe
Resource
win10v2004-en-20220112
Malware Config
Extracted
hawkeye_reborn
- fields
- name
Targets
-
-
Target
ac1ae936d93f1428f49c7dc7d49b1354520be52cd10d57563d139d0693490871
-
Size
1.9MB
-
MD5
048905d3c65f3d1da17e665efb775ed9
-
SHA1
71f7b2a4f91959909f1fcc73417933250bc5064d
-
SHA256
ac1ae936d93f1428f49c7dc7d49b1354520be52cd10d57563d139d0693490871
-
SHA512
d6545d1875909a5bde60568cb53c07e2b53ea6acd186914ffa4e7dd9970dc0f7c562dd30dd86bab7e270f5cc0f441ead0bc2baf731ffa801cc50a58db7967ff5
-
HawkEye Reborn
HawkEye Reborn is an enhanced version of the HawkEye malware kit.
-
M00nd3v_Logger
M00nd3v Logger is a .NET stealer/logger targeting passwords from browsers and email clients.
-
M00nD3v Logger Payload
Detects M00nD3v Logger payload in memory.
-
NirSoft MailPassView
Password recovery tool for various email clients
-
NirSoft WebBrowserPassView
Password recovery tool for various web browsers
-
Nirsoft
-
Uses the VBS compiler for execution
-
Accesses Microsoft Outlook accounts
-
Suspicious use of SetThreadContext
-