Overview

overview

10

Static

static

10

0cf8d6df16...f4.exe

windows7_x64

6

0cf8d6df16...f4.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0cf8d6df160884ce6c60de266d3094bbc352e9a3aaba030c06529defd07ba7f4

  • Size

    552KB

  • Sample

    220222-yyasqaedhn

  • MD5

    f011287c0d4e51e522a4a8f997571ea2

  • SHA1

    efd9e9905f140f06f13c597f380f466a8d49f5b9

  • SHA256

    0cf8d6df160884ce6c60de266d3094bbc352e9a3aaba030c06529defd07ba7f4

  • SHA512

    30f3b1bd6c9e16483477f32f3af34ad2b3456b54287c572518f9e8d81192f5851e4c469d13560d7b2f3b1abac5c85c4c362cb22558a22b7956dff349c1d7fd4c

Score
10/10
hawkeye_rebornm00nd3v_logger

Malware Config

Extracted

Family

hawkeye_reborn

Attributes
  • fields

  • name

Targets

    • Target

      0cf8d6df160884ce6c60de266d3094bbc352e9a3aaba030c06529defd07ba7f4

    • Size

      552KB

    • MD5

      f011287c0d4e51e522a4a8f997571ea2

    • SHA1

      efd9e9905f140f06f13c597f380f466a8d49f5b9

    • SHA256

      0cf8d6df160884ce6c60de266d3094bbc352e9a3aaba030c06529defd07ba7f4

    • SHA512

      30f3b1bd6c9e16483477f32f3af34ad2b3456b54287c572518f9e8d81192f5851e4c469d13560d7b2f3b1abac5c85c4c362cb22558a22b7956dff349c1d7fd4c

    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks