hawkeye | 63f1a99e5ad0aa15bc12bfe7b20d1e9a9df3752b61ec9dbb0d1bb62fc8cfe6c4 | Triage

Sharing

General

Target

ultimate_stealer.bat
Size

1KB
Sample

241231-mtd4sswrav
MD5

8b98f150c51dd4d1131853ce39e0404a
SHA1

bc017b390021d8ad234bedfbb081fc0a3614c081
SHA256

63f1a99e5ad0aa15bc12bfe7b20d1e9a9df3752b61ec9dbb0d1bb62fc8cfe6c4
SHA512

a6768852c9501eaf8cd9b81dc35f863757e66d5fb532c8265f7d3ca2239c4f1fe0565ab9f37793af17fdbca642861cb986d4ac260ecb632834047b0cce8e750c

Score

10^/10

hawkeye collection discovery execution keylogger persistence privilege_escalation spyware stealer trojan

Malware Config

Targets

- Target
  
  ultimate_stealer.bat
- Size
  
  1KB
- MD5
  
  8b98f150c51dd4d1131853ce39e0404a
- SHA1
  
  bc017b390021d8ad234bedfbb081fc0a3614c081
- SHA256
  
  63f1a99e5ad0aa15bc12bfe7b20d1e9a9df3752b61ec9dbb0d1bb62fc8cfe6c4
- SHA512
  
  a6768852c9501eaf8cd9b81dc35f863757e66d5fb532c8265f7d3ca2239c4f1fe0565ab9f37793af17fdbca642861cb986d4ac260ecb632834047b0cce8e750c
Score

10^/10

hawkeye collection discovery execution keylogger persistence privilege_escalation spyware stealer trojan
- HawkEye
  HawkEye is a malware kit that has seen continuous development since at least 2013.
  keylogger trojan stealer spyware hawkeye
- Hawkeye family
  hawkeye
- Clipboard Data
  Adversaries may collect data stored in the clipboard from users copying information within or between applications.
  collection
- Deletes itself
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Wi-Fi Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

hawkeyecollectiondiscoveryexecutionkeyloggerpersistenceprivilege_escalationspywarestealertrojan

behavioral2

hawkeyecollectiondiscoveryexecutionkeyloggerpersistenceprivilege_escalationspywarestealertrojan