Overview

overview

10

Static

static

ed4a69b1e8...48.exe

windows7-x64

10

ed4a69b1e8...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed4a69b1e86efdf84e37fd8385ba1dabe4bf249994e26df0d91777e8012ce348

  • Size

    37KB

  • Sample

    221107-lly9bsaae5

  • MD5

    0667a5d216ed03d883423cfce3fafb97

  • SHA1

    3e8c21453af14fc5105ec034925eca0eb34458cf

  • SHA256

    ed4a69b1e86efdf84e37fd8385ba1dabe4bf249994e26df0d91777e8012ce348

  • SHA512

    72734fa8d0e2c877c37302c408caab4ab0eeb90f225e074506f69da998f661d6fd5cca433085fe4cb655756a72b25686d5d1f2a8ed606b7f37b59ef0c5c1cdf5

  • SSDEEP

    768:Sh7P+JmmxmTJnqfhPw1n9rG+SBQvNIsJp5U49FnuiFJzuB6rwH:fJmmxmTJqZPw1nFGwNhp5U0FnuiFU6re

Score
10/10
hawkeyekeyloggerpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      ed4a69b1e86efdf84e37fd8385ba1dabe4bf249994e26df0d91777e8012ce348

    • Size

      37KB

    • MD5

      0667a5d216ed03d883423cfce3fafb97

    • SHA1

      3e8c21453af14fc5105ec034925eca0eb34458cf

    • SHA256

      ed4a69b1e86efdf84e37fd8385ba1dabe4bf249994e26df0d91777e8012ce348

    • SHA512

      72734fa8d0e2c877c37302c408caab4ab0eeb90f225e074506f69da998f661d6fd5cca433085fe4cb655756a72b25686d5d1f2a8ed606b7f37b59ef0c5c1cdf5

    • SSDEEP

      768:Sh7P+JmmxmTJnqfhPw1n9rG+SBQvNIsJp5U49FnuiFJzuB6rwH:fJmmxmTJqZPw1nFGwNhp5U0FnuiFU6re

    Score
    10/10
    hawkeyekeyloggerpersistencespywarestealertrojan

    • HawkEye

      HawkEye is a malware kit that has seen continuous development since at least 2013.

      keyloggertrojanstealerspywarehawkeye

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks