hawkeye | f75b89f64035020942c29ae2ff37d0f5789fa73310632e5ad951686cc9cd489a | Triage

Sharing

General

Target

f75b89f64035020942c29ae2ff37d0f5789fa73310632e5ad951686cc9cd489aN
Size

23KB
Sample

241026-3xc9ns1hnr
MD5

3d25d84500c967ecef3a0026dbfed410
SHA1

3515bef2e70722e9718edb51b4e1e9a2f80a1f0a
SHA256

f75b89f64035020942c29ae2ff37d0f5789fa73310632e5ad951686cc9cd489a
SHA512

349c3561f4e6961bbbd88c17f961ee6fcd34117b8a5664a173f8ebef0546d0b5cc05d113102730ef82907cc66b803849bf6dfd68692fc37d16a0575e4ac17d99
SSDEEP

384:o3Eh9xqX7jumTaNb6SxZLIXYQPhMVDrgHa/Dw1I0Q1abpyq5abpy6J6:7hjgumONblmOKwk1IXatyq5aty6J6

Score

10^/10

hawkeye discovery execution keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  f75b89f64035020942c29ae2ff37d0f5789fa73310632e5ad951686cc9cd489aN
- Size
  
  23KB
- MD5
  
  3d25d84500c967ecef3a0026dbfed410
- SHA1
  
  3515bef2e70722e9718edb51b4e1e9a2f80a1f0a
- SHA256
  
  f75b89f64035020942c29ae2ff37d0f5789fa73310632e5ad951686cc9cd489a
- SHA512
  
  349c3561f4e6961bbbd88c17f961ee6fcd34117b8a5664a173f8ebef0546d0b5cc05d113102730ef82907cc66b803849bf6dfd68692fc37d16a0575e4ac17d99
- SSDEEP
  
  384:o3Eh9xqX7jumTaNb6SxZLIXYQPhMVDrgHa/Dw1I0Q1abpyq5abpy6J6:7hjgumONblmOKwk1IXatyq5aty6J6
Score

10^/10

hawkeye discovery execution keylogger spyware stealer trojan
- HawkEye
  HawkEye is a malware kit that has seen continuous development since at least 2013.
  keylogger trojan stealer spyware hawkeye
- Hawkeye family
  hawkeye
- Blocklisted process makes network request
- Drops file in Drivers directory
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

hawkeyediscoveryexecutionkeyloggerspywarestealertrojan

behavioral2

hawkeyediscoveryexecutionkeyloggerspywarestealertrojan