Extracted

• • Target

    55113b3a648e1d2aa3fbafa7ef783a0c54b3402f9574728623ca838d365bc816

  • Size

    771KB

  • MD5

    e42947c820b9064be14002b850964c4f

  • SHA1

    fb5f811e1ff6aeb2704619f86a0576f76139c860

  • SHA256

    55113b3a648e1d2aa3fbafa7ef783a0c54b3402f9574728623ca838d365bc816

  • SHA512

    8aefbe8c1fee18726f607adb84507cfe49a687f47aabe00ddce1afc32af6efe2f2ad1538c31b7ffeffb505a94c5f93cf329c898e856d974ffe6e0bb05306ad63

  Score

  10^/10

  hawkeye_rebornm00nd3v_loggercollectioninfostealerkeyloggerspywarestealertrojan

  • HawkEye Reborn

    HawkEye Reborn is an enhanced version of the HawkEye malware kit.

    keyloggertrojanstealerspywarehawkeye_reborn

  • M00nd3v_Logger

    M00nd3v Logger is a .NET stealer/logger targeting passwords from browsers and email clients.

    stealerspywarem00nd3v_logger

  • M00nD3v Logger Payload

    Detects M00nD3v Logger payload in memory.

    infostealer

  • NirSoft MailPassView

    Password recovery tool for various email clients

  • NirSoft WebBrowserPassView

    Password recovery tool for various web browsers

  • Nirsoft

  • Uses the VBS compiler for execution

  • Accesses Microsoft Outlook accounts

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2