Overview

overview

10

Static

static

3

speedymaqing.exe

windows11-21h2-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    speedymaqing.exe

  • Size

    28.7MB

  • Sample

    241022-dc13kavbnq

  • MD5

    cdc5abe8bb0a425a7afd8a875c8f4cbd

  • SHA1

    aee98ac6e89d0c358d58998f6fe2ade34fa53420

  • SHA256

    fbde94ffa8a4bd286a6780a0561456858118d97bd4ae5c4d7b6254e77a3dcaf1

  • SHA512

    0b660bfd58620bd9333d210ae10d021022c02e63f2883f4667fab48ed0d8be55e3dd17ebce2d8bfe3e91cd80ccf0e0f920f066390c009752c58276e299895df2

  • SSDEEP

    786432:T/c1JggW80zX1QtIbSCH1JAEjf50aIC2AgKrbmVSg:o9WHliI20FLayrbWS

Score
10/10
hawkeyediscoverykeyloggerpersistencepyinstallerspywarestealertrojan

Malware Config

Targets

    • Target

      speedymaqing.exe

    • Size

      28.7MB

    • MD5

      cdc5abe8bb0a425a7afd8a875c8f4cbd

    • SHA1

      aee98ac6e89d0c358d58998f6fe2ade34fa53420

    • SHA256

      fbde94ffa8a4bd286a6780a0561456858118d97bd4ae5c4d7b6254e77a3dcaf1

    • SHA512

      0b660bfd58620bd9333d210ae10d021022c02e63f2883f4667fab48ed0d8be55e3dd17ebce2d8bfe3e91cd80ccf0e0f920f066390c009752c58276e299895df2

    • SSDEEP

      786432:T/c1JggW80zX1QtIbSCH1JAEjf50aIC2AgKrbmVSg:o9WHliI20FLayrbWS

    Score
    10/10
    hawkeyediscoverykeyloggerpersistencespywarestealertrojan

    • HawkEye

      HawkEye is a malware kit that has seen continuous development since at least 2013.

      keyloggertrojanstealerspywarehawkeye

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks