General

  • Target

    4955d4c4118b0a607f02360195d3ebbf3596d4e9ae8a33b5b461fdebdeb15910

  • Size

    556KB

  • Sample

    220310-zql2fsedfq

  • MD5

    6d193e9600a7bc5ba7fde63e44beaf4e

  • SHA1

    8d700962dc771d2ba1b1343adc4bdc3d5ecd338d

  • SHA256

    4955d4c4118b0a607f02360195d3ebbf3596d4e9ae8a33b5b461fdebdeb15910

  • SHA512

    95f0b05daa233e55b48a125544447dab2fc6e8ed01baf79f982defb5cf364a5a76059ad432f777ec1acba77f03cdea8a568c8a67448e96f51b6d33113aa31ef1

Malware Config

Extracted

Family

hawkeye_reborn

Attributes
  • fields

  • name

Targets

    • Target

      4955d4c4118b0a607f02360195d3ebbf3596d4e9ae8a33b5b461fdebdeb15910

    • Size

      556KB

    • MD5

      6d193e9600a7bc5ba7fde63e44beaf4e

    • SHA1

      8d700962dc771d2ba1b1343adc4bdc3d5ecd338d

    • SHA256

      4955d4c4118b0a607f02360195d3ebbf3596d4e9ae8a33b5b461fdebdeb15910

    • SHA512

      95f0b05daa233e55b48a125544447dab2fc6e8ed01baf79f982defb5cf364a5a76059ad432f777ec1acba77f03cdea8a568c8a67448e96f51b6d33113aa31ef1

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks