Overview

overview

10

Static

static

3

de823ba5d6...18.exe

windows7-x64

10

de823ba5d6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de823ba5d67de8682e6d7b8b472dbbcb_JaffaCakes118

  • Size

    151KB

  • Sample

    240913-vaj5psxhmg

  • MD5

    de823ba5d67de8682e6d7b8b472dbbcb

  • SHA1

    5a6c8a94f16906bfce04a892b40aaa5470fdaeb6

  • SHA256

    b5e5a10f1938311fb83b7c8a9ad59977e12734f4f61361afa83dd49d6ca377d3

  • SHA512

    5659e3c4d7e3af18cf06f3c0a05272deef6b169be2b3c2979f7ab69fc90120877d3e52b508a8e24949e6622e428fc82396a42fb30ec7d5ff0bc8733d034649de

  • SSDEEP

    3072:6OfDkDkZ8w0HS4FjEoVrS3VOqiRrXbvJOykW1Ly4d:f7voBFIZIbvJOmLy

Score
10/10
hawkeyediscoverykeyloggerpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      de823ba5d67de8682e6d7b8b472dbbcb_JaffaCakes118

    • Size

      151KB

    • MD5

      de823ba5d67de8682e6d7b8b472dbbcb

    • SHA1

      5a6c8a94f16906bfce04a892b40aaa5470fdaeb6

    • SHA256

      b5e5a10f1938311fb83b7c8a9ad59977e12734f4f61361afa83dd49d6ca377d3

    • SHA512

      5659e3c4d7e3af18cf06f3c0a05272deef6b169be2b3c2979f7ab69fc90120877d3e52b508a8e24949e6622e428fc82396a42fb30ec7d5ff0bc8733d034649de

    • SSDEEP

      3072:6OfDkDkZ8w0HS4FjEoVrS3VOqiRrXbvJOykW1Ly4d:f7voBFIZIbvJOmLy

    Score
    10/10
    hawkeyediscoverykeyloggerpersistencespywarestealertrojan

    • HawkEye

      HawkEye is a malware kit that has seen continuous development since at least 2013.

      keyloggertrojanstealerspywarehawkeye

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks