General
-
Target
64baea6c193db9e41ef617f86cd77599eaf06fa8054e362051b98147ed5abdb3
-
Size
404KB
-
Sample
220310-fmecnahbdk
-
MD5
a77c2cd87f4f064352854ff7851a89a3
-
SHA1
cf93d35e504bb1af5bf2faa2281726e541e98c82
-
SHA256
64baea6c193db9e41ef617f86cd77599eaf06fa8054e362051b98147ed5abdb3
-
SHA512
0c91d8646007796839bbd73eef95b60f49bd7308a313d00f852a5e7defaa8d5bf9b59461b7968daf06071f09134f9345b87c4ca0cb289ecdd5efd1214983b8e7
Static task
static1
Behavioral task
behavioral1
Sample
64baea6c193db9e41ef617f86cd77599eaf06fa8054e362051b98147ed5abdb3.exe
Resource
win7-20220223-en
Behavioral task
behavioral2
Sample
64baea6c193db9e41ef617f86cd77599eaf06fa8054e362051b98147ed5abdb3.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
hawkeye_reborn
- fields
- name
Targets
-
-
Target
64baea6c193db9e41ef617f86cd77599eaf06fa8054e362051b98147ed5abdb3
-
Size
404KB
-
MD5
a77c2cd87f4f064352854ff7851a89a3
-
SHA1
cf93d35e504bb1af5bf2faa2281726e541e98c82
-
SHA256
64baea6c193db9e41ef617f86cd77599eaf06fa8054e362051b98147ed5abdb3
-
SHA512
0c91d8646007796839bbd73eef95b60f49bd7308a313d00f852a5e7defaa8d5bf9b59461b7968daf06071f09134f9345b87c4ca0cb289ecdd5efd1214983b8e7
-
HawkEye Reborn
HawkEye Reborn is an enhanced version of the HawkEye malware kit.
-
M00nd3v_Logger
M00nd3v Logger is a .NET stealer/logger targeting passwords from browsers and email clients.
-
NirSoft MailPassView
Password recovery tool for various email clients
-
NirSoft WebBrowserPassView
Password recovery tool for various web browsers
-
Nirsoft
-
Uses the VBS compiler for execution
-
Accesses Microsoft Outlook accounts
-
Suspicious use of SetThreadContext
-