hawkeye | 481e617bf801b26b6fb8edc67ea637b1e9db954c0ee673e9a2bce0071768b929 | Triage

Sharing

General

Target

51de2b9486f0b8fc4406ac8956a4da2b_JaffaCakes118
Size

608KB
Sample

240717-hfvr6szbmk
MD5

51de2b9486f0b8fc4406ac8956a4da2b
SHA1

f78be95c8e26a707b927823a0ef6c006e680a22d
SHA256

481e617bf801b26b6fb8edc67ea637b1e9db954c0ee673e9a2bce0071768b929
SHA512

990a9b4ae0dabccb5d94a917da6034a7b23f22173b2fe2c651227f58a31ed3141f112b8b5c3dc30e1ee341c3db3736b947e84d884e95e3dd1953a9d3f9fd1078
SSDEEP

12288:F3Mhue1faMKxXFuK1dCZZ8/Ob6M4gcGrcFyYgWR5:F3RIaxXFuK18Jb6ZSrcs

Score

10^/10

hawkeye keylogger persistence spyware stealer trojan

Malware Config

Targets

- Target
  
  51de2b9486f0b8fc4406ac8956a4da2b_JaffaCakes118
- Size
  
  608KB
- MD5
  
  51de2b9486f0b8fc4406ac8956a4da2b
- SHA1
  
  f78be95c8e26a707b927823a0ef6c006e680a22d
- SHA256
  
  481e617bf801b26b6fb8edc67ea637b1e9db954c0ee673e9a2bce0071768b929
- SHA512
  
  990a9b4ae0dabccb5d94a917da6034a7b23f22173b2fe2c651227f58a31ed3141f112b8b5c3dc30e1ee341c3db3736b947e84d884e95e3dd1953a9d3f9fd1078
- SSDEEP
  
  12288:F3Mhue1faMKxXFuK1dCZZ8/Ob6M4gcGrcFyYgWR5:F3RIaxXFuK18Jb6ZSrcs
Score

10^/10

hawkeye keylogger persistence spyware stealer trojan
- HawkEye
  HawkEye is a malware kit that has seen continuous development since at least 2013.
  keylogger trojan stealer spyware hawkeye
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

hawkeyekeyloggerpersistencespywarestealertrojan

behavioral2

hawkeyekeyloggerpersistencespywarestealertrojan