Overview

overview

10

Static

static

10

8b02965924...14.exe

windows7_x64

6

8b02965924...14.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b029659245e11cc52fe29bcf44890eba51e51ab512761ceebc0aba40588b014

  • Size

    631KB

  • Sample

    220312-l1zteaedhl

  • MD5

    9b8383f155de4811e64285bb28f417dc

  • SHA1

    15fae937f83e1251c0483818e75e4c609cad91cf

  • SHA256

    8b029659245e11cc52fe29bcf44890eba51e51ab512761ceebc0aba40588b014

  • SHA512

    699d08d52af4243c4cad7149188e52d0440c7a788e4d93ff7ad1705fc951866029a928f3b55db149f7c83fbe7b9f1abed5872aabde4dadbaeb180400878d5b15

Score
10/10
hawkeye_rebornm00nd3v_loggerinfostealer

Malware Config

Extracted

Family

hawkeye_reborn

Attributes
  • fields

  • name

Targets

    • Target

      8b029659245e11cc52fe29bcf44890eba51e51ab512761ceebc0aba40588b014

    • Size

      631KB

    • MD5

      9b8383f155de4811e64285bb28f417dc

    • SHA1

      15fae937f83e1251c0483818e75e4c609cad91cf

    • SHA256

      8b029659245e11cc52fe29bcf44890eba51e51ab512761ceebc0aba40588b014

    • SHA512

      699d08d52af4243c4cad7149188e52d0440c7a788e4d93ff7ad1705fc951866029a928f3b55db149f7c83fbe7b9f1abed5872aabde4dadbaeb180400878d5b15

    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks