hawkeye | 20a7268f2f15cad9e938de16f11beabef087f42aa09ea94682dbde710ada5403 | Triage

Sharing

General

Target

10da92002327ad6a43757698a6e56197
Size

524KB
Sample

231230-g11cqadcg8
MD5

10da92002327ad6a43757698a6e56197
SHA1

526d543999ff9672be8db91933a0f0947cd0c628
SHA256

20a7268f2f15cad9e938de16f11beabef087f42aa09ea94682dbde710ada5403
SHA512

370a70d6e475e4b0709ecfc0c8ec729dca66b904b5c285b56b952f29bd407ce958eb51076cc36f5b05d3d402523f0a71e965b6fa6c3b92d4e758349269f3af1c
SSDEEP

12288:xR7zxL/PSUS2Mtdxz2XFB/bjbZi3S5EKLSsnuIgejNSQ1S:vzxLnS7LiXt5EKLSsnJgeJSQ1

Score

10^/10

hawkeye keylogger persistence spyware stealer trojan

Malware Config

Targets

- Target
  
  10da92002327ad6a43757698a6e56197
- Size
  
  524KB
- MD5
  
  10da92002327ad6a43757698a6e56197
- SHA1
  
  526d543999ff9672be8db91933a0f0947cd0c628
- SHA256
  
  20a7268f2f15cad9e938de16f11beabef087f42aa09ea94682dbde710ada5403
- SHA512
  
  370a70d6e475e4b0709ecfc0c8ec729dca66b904b5c285b56b952f29bd407ce958eb51076cc36f5b05d3d402523f0a71e965b6fa6c3b92d4e758349269f3af1c
- SSDEEP
  
  12288:xR7zxL/PSUS2Mtdxz2XFB/bjbZi3S5EKLSsnuIgejNSQ1S:vzxLnS7LiXt5EKLSsnJgeJSQ1
Score

10^/10

hawkeye keylogger persistence spyware stealer trojan
- HawkEye
  HawkEye is a malware kit that has seen continuous development since at least 2013.
  keylogger trojan stealer spyware hawkeye
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

hawkeyekeyloggerpersistencespywarestealertrojan

behavioral2

hawkeyekeyloggerpersistencespywarestealertrojan