Overview

overview

10

Static

static

9

eye.exe

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eye.exe

  • Size

    520KB

  • Sample

    240813-sp5zls1cnf

  • MD5

    b40186916e876be867dd6037c004aad3

  • SHA1

    406285de2f8e61389b7bd31d9dad8d6651af0f82

  • SHA256

    aa95f10c49e042783c3b6a391b3d03f206f270ca11110a8e72e23a85de74836f

  • SHA512

    6f06451b7a43c029e2ffb3cecade0850cd5cc2ac58dea7d9d0051e61400062d2c8464bb68023db72a6427c6a6b463e4d8730dbebdfc059e0afe220f8349f7c4c

  • SSDEEP

    12288:IK5z5eQtqB5urTIoYWBQk1E+VF9mOx9pi:AQtqBorTlYWBhE+V3mO

Score
10/10
hawkeyediscoverykeyloggerpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      eye.exe

    • Size

      520KB

    • MD5

      b40186916e876be867dd6037c004aad3

    • SHA1

      406285de2f8e61389b7bd31d9dad8d6651af0f82

    • SHA256

      aa95f10c49e042783c3b6a391b3d03f206f270ca11110a8e72e23a85de74836f

    • SHA512

      6f06451b7a43c029e2ffb3cecade0850cd5cc2ac58dea7d9d0051e61400062d2c8464bb68023db72a6427c6a6b463e4d8730dbebdfc059e0afe220f8349f7c4c

    • SSDEEP

      12288:IK5z5eQtqB5urTIoYWBQk1E+VF9mOx9pi:AQtqBorTlYWBhE+V3mO

    Score
    10/10
    hawkeyediscoverykeyloggerpersistencespywarestealertrojan

    • HawkEye

      HawkEye is a malware kit that has seen continuous development since at least 2013.

      keyloggertrojanstealerspywarehawkeye

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks