General

  • Target

    a63d62a7566226f922c70cdda933c39cf565b974f4141ba6d5d10b5eee8c8af0

  • Size

    552KB

  • Sample

    220312-cc8a7shbbq

  • MD5

    c3f34faef2bb748c182b97d07f2ac772

  • SHA1

    48f9fecf2b1d56709677e8b5db1eb12ad21fdf77

  • SHA256

    a63d62a7566226f922c70cdda933c39cf565b974f4141ba6d5d10b5eee8c8af0

  • SHA512

    01efc8c08d9f6fd8ee6ef24e520d1d3d08a47f8600cff5b565e8eddd0c693fc0fcb29630d14ca1d185c3ea50102cb7683706872070720aa86a1f61279b4f337e

Malware Config

Extracted

Family

hawkeye_reborn

Attributes
  • fields

  • name

Targets

    • Target

      a63d62a7566226f922c70cdda933c39cf565b974f4141ba6d5d10b5eee8c8af0

    • Size

      552KB

    • MD5

      c3f34faef2bb748c182b97d07f2ac772

    • SHA1

      48f9fecf2b1d56709677e8b5db1eb12ad21fdf77

    • SHA256

      a63d62a7566226f922c70cdda933c39cf565b974f4141ba6d5d10b5eee8c8af0

    • SHA512

      01efc8c08d9f6fd8ee6ef24e520d1d3d08a47f8600cff5b565e8eddd0c693fc0fcb29630d14ca1d185c3ea50102cb7683706872070720aa86a1f61279b4f337e

    Score
    9/10
    • NirSoft WebBrowserPassView

      Password recovery tool for various web browsers

    • Nirsoft

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks