Extracted

• • Target

    RFQ for Supply of Pipe FittingsValves for Al-Zour Refinery (KIPIC).exe

  • Size

    1.7MB

  • MD5

    e018a68c40d9f97e7c0a2e922b661acd

  • SHA1

    e4fa8d11849cd1d6611efe3fdfb1261ec0824ed3

  • SHA256

    8b3b885a96e02bc4d3147259d56232859bc61086621d14a9ad0d4f40bd392756

  • SHA512

    a2d09ed2da4c4e6ad7f0f3126d5a933e5b1df7bf276aac9418292c0a6b92b83e46961df67550ad15143318189b3adfda3d6914394ba2f06cb610587d031c17b3

  Score

  10^/10

  hawkeye_rebornm00nd3v_loggercollectioninfostealerkeyloggerspywarestealertrojan

  • HawkEye Reborn

    HawkEye Reborn is an enhanced version of the HawkEye malware kit.

    keyloggertrojanstealerspywarehawkeye_reborn

  • M00nd3v_Logger

    M00nd3v Logger is a .NET stealer/logger targeting passwords from browsers and email clients.

    stealerspywarem00nd3v_logger

  • M00nD3v Logger Payload

    Detects M00nD3v Logger payload in memory.

    infostealer

  • NirSoft MailPassView

    Password recovery tool for various email clients

  • NirSoft WebBrowserPassView

    Password recovery tool for various web browsers

  • Nirsoft

  • Executes dropped EXE

  • Drops startup file

  • Uses the VBS compiler for execution

  • Accesses Microsoft Outlook accounts

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2